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To  whom  it  may  concern, 

I  offer  the  following  thoughts  on  the  research  and  report  recently  completed  by  COL  Allen 
Estes  for  the  Engineering  Research  and  Development  Center. 

The  US  Army  Corps  of  Engineers  owns  and  operates  a  substantial  inventory  of  Civil 
Works  infrastructure.  The  difficulties  of  managing  this  inventory  increase  substantially  as 
the  structures  age.  More  than  50%  of  the  inventory  is  now  older  than  the  original  design 
life.  These  valuable  but  aging  structures  provide  an  excellent  opportunity  to  apply  creative 
engineering  thought  to  important  questions  about  how  to  best  maintain  and  enhance  the 
Army'  infrastructure. 

Civil  Works  infrastructure  is  important  to  the  nation's  economy  but  also  to  the  military 
warfighter.  Approximately  30%  of  the  inter-city  good  transport  is  on  the  navigable 
waterways,  the  Corps  generates  24%  of  the  US  hydropower,  and  the  Corps  is  the  largest 
recreation  provider  in  the  US.  More  than  one  half  of  the  Corps  workforce  is  employed  on 
the  Civil  Works  side.  This  provides  an  important  resource  of  engineering  expertise  that 
can  be  applied  to  military  applications  as  the  need  arises.  The  rebuilding  of  Iraq  provides 
the  best  example  but  there  have  been  many  others  in  the  last  10-20  years. 

COL  Estes  has  taken  Condition  Indexes  (CIs)  developed  for  Civil  Works  structures  and 
extended  their  applicability  in  a  direction  I  have  long  thought  appropriate.  Design  and 
safety  evaluation  of  structures  is  becoming  increasingly  risk-based  but  it  is  difficult  to 
incorporate  the  current  condition  into  risk  models.  Proxies  such  as  age  and  usage  must 
often  suffice.  COL  Estes  has  investigated  this  issue  and  developed  a  methodology  for 
prioritization  of  repair  and  rehabilitation  using  CIs  in  a  risk-based  hierarchy.  His  ideas 
present  an  original  alternative  to  more  recognized  risk  based  engineering  evaluations  with 
significantly  different  strengths  and  weaknesses  that  merit  further  consideration. 

I  find  it  to  be  somewhat  difficult  to  grade  this  work  base  on  the  scale  that  was  sent.  COL 
Estes'  work  merits  many  of  the  descriptives  listed  under  "A"  work,  particularly  "new 
understanding"  and  "original.”  I  also  found  the  report  to  be  well  written;  the  charts  and 
graphs  were  highly  professional;  and  the  explanations  were  thorough  and  backed  up  by 
numerical  examples.  COL  Estes  was  forthright  in  listing  both  the  strengths  and  limitations 
of  the  methodology  he  proposes.  I  have  some  concerns  about  the  limitations,  specifically 
concerning  the  validity  of  using  reliability  methods  for  condition  indices  and  how  best  to 
describe  system  behavior.  These  concerns  can  only  be  addressed  over  the  coming  months 
as  COL  Estes,  my  colleagues,  and  I  digest  this  research  and  decide  how  it  can  best  be 
implemented  by  the  Corps  of  Engineers.  Because  there  are  unresolved  issues  that  will 
require  further  effort,  I  would  like  to  assign  an  "A-"  grade. 

I  have  appreciated  the  opportunity  to  collaborate  with  COL  Estes.  His  work  provides  a 
valuable  addition  to  the  Corps  Civil  Works  research. 


Stuart  Foltz 
Civil  Engineer 
ERDC-CERL-CFF 
2902  Newmark  Dr  (61822) 

PO  Box  9005 
Champaign,  IL  61821 
217-373-3487  (800)872-2375 
fax  217-373-3490 

"Those  who  would  give  up  Liberty,  to  purchase  a  little  temporary  Safety,  deserve  neither 
Liberty  nor  Safety."  -  Ben  Franklin 


Estimating  Risk  from  Spillways  on  Dams  Using 
Condition  Assessment  Data 


Chapter  1:  Introduction 

1.1  Background 

The  United  States  Army  Corps  of  Engineers  is  responsible  for  maintaining  and 
operating  the  Nation’s  navigable  waterways  and  is  the  primary  agency  for  maintaining 
federal  flood  control  dams.  This  includes  a  vast  amount  of  infrastructure  that  includes 
270  navigation  dams,  350  reservoir  dams,  and  238  lock  chambers  [Bullock  and  Foltz 
1995],  The  inland  waterways  which  are  maintained  by  the  Corps  of  Engineers  are  used 
to  transport  630  million  tons  of  consumer  goods  every  year  that  include  petroleum,  coal, 
construction  aggregate,  chemicals,  grain,  and  mineral  ores,  with  an  annual  value  of  $73 
billion.  The  navigable  inland  waterways  carry  roughly  17%  of  the  Nation’s  volume  of 
intercity  cargo  -  a  significant  portion  of  the  economy  [USACE  2004]. 

The  entire  inventory  of  navigation  structures  is  deteriorating  over  time  and 
requires  billions  of  dollars  to  upgrade,  maintain,  and  repair.  Over  half  of  the  locks  and 
dams  operated  by  the  Corps  of  Engineers  are  over  50  years  old.  In  2002,  General 
Flowers  [Flowers  2002]  reported  a  critical  maintenance  backlog  of  $587  million  for 
navigation.  The  Civil  Works  Budget  for  2003  was  $4.3  billion,  of  which  $1.98  billion 
(rou^ly  46%)  was  allocated  for  General  Operation  and  Maintenance.  Within  the  Corps 
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budget,  navigation  structures  are  competing  with  projects  that  involve  flood  control, 
ecosystem  restoration  and  recreation  facilities.  Since  the  terrorist  attack  of  9/1 1 , 
infrastructure  security  has  become  a  priority.  In  determining  the  size  of  the  Corps  of 
Engineers  budget,  Congress  must  decide  between  a  huge  range  of  competing  priorities 
that  include  everything  from  national  defense  and  education  to  health  care  and  foreign 
aid. 


As  such,  maintenance  dollars  are  scarce,  will  never  be  sufficient  to  cover  all  needs 
and  therefore  must  be  allocated  efficiently.  The  Coips  attempts  to  do  this  by  using 
Principles  for  Improving  Performance  which  include  objective  criteria,  cost-baiefit 
apal^es,  and  a  rank-order  comparison  of  competing  projects.  The  goal  is  to  fund  the 
activities  fliat  yield  the  greatest  net  benefit  to  society  per  dollar  invested  [OMB  2004]. 
Because  the  decisions  are  quantitative  in  nature,  the  Corps  of  Engineers  uses  analytical 
tools  and  methods  that  help  determine  if  the  benefits  of  a  project  outwei^  the  associated 
costs.  For  an  allocatal  amoimt  of  money,  the  Corps  must  prioritize  which  structures 
would  benefit  the  most  from  maintenance  investment. 

1.2  Risk-Based  Analysis 

In  most  instances,  maintenance  dollars  should  be  allocated  to  those  projects  that 
pose  the  greatest  risk  where  risk  is  quantified  as  a  product  of  failure  consequences  and 
probability  of  occurrence.  Similarly,  in  a  cost-benefit  analj^is,  the  benefit  is  often 
computed  as  the  reduced  risk  achieved  by  making  a  repair  or  rehabilitating  a  structure.  In 
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both  cases,  a  probabilistic  analysis  is  needed  to  quantify  the  probability  of  failure  under 
existing  and  future  conditions. 

A  major  rehabilitation  project,  for  example,  typically  involves  a  cost  of  over  $8 
million  and  requires  a  time-dependent  reliability  analysis  as  justification  [USAGE  1996]. 
This  process  involves  defining  all  random  variables,  predicting  how  loads  will  change 
and  the  structure  will  deteriorate  over  time,  and -quantifying  the  probability  of  failure  of 
the  structure  at  various  points  in  time.  The  probability  of  failure  is  the  probability  that  the 
demand  on  the  structure  will  exceed  its  capacity.  These  point-in-time  probabilities  of 
failure  are  converted  to  a  hazard  function  which  describes  the  probability  of  failure  in  a 
particular  year  given  the  structure  has  not  already  failed.  The  hazard  function  is  applied 
to  an  event  tree  that  incorporates  the  consequences  of  failure  to  define  the  risk  to  the 
structure.  This  risk  is  used  in  the  cost-benefit  analysis  to  assess  the  effectiveness  of  the 
proposed  major  rehabilitation.  A  similar  procedure  is  used  to  perform  a  reliability 
analysis  on  electrical  and  mechanical  equipment,  except  that  the  reliability  is  based  on 
previous  statistical  performance,  rather  than  a  capacity-demand  analysis. 

13  Condition  Index 

At  the  same  time,  the  Corps  of  Engineers  has  developed  a  Condition  Index  (Cl) 
inspection  system  for  the  various  structures  it  operates  and  maintains.  A  Cl  is  a 
standardized  snapshot  assessment  of  the  condition  of  a  structure  based  on  a  visual 
inspection.  The  Condition  Index  ranges  fi'om  0  (failed)  to  100  (excellent)  and  was 
developed  to  assist  in  the  prioritization  of  nonrecurring  maintenance  work.  Cl  systems 
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have  been  developed  for  miter  gates,  tainter  gates,  embankment  dams,  sector  gates, 
hydropower  structures,  and  coastal  projects  such  as  breakwaters  and  jetties.  While  the  Cl 
is  a  valuable  tool  for  comparing  the  relative  condition  of  various  structures,  it  does  not 
offer  a  good  measure  of  risk  to  a  structure. 

The  Corps  of  Engineer  is  currently  evaluating  a  procedure  for  calculating  a  Cl 
for  spillways  on  dams  (Chouinard  et.al.  2003),  This  Cl  procedure  defines  the  spillway 
system  of  a  dam  as  a  hierarchical  structure  consisting  of  subsystems,  components,  and 
inspectable  sub-components.  The  various  components  and  sub-systems  are  assigned 
importance  factors  based  on  specific  failure  modes  such  as  overtopping,  failure  of  a  gate 
to  close,  unintentional  gate  opening,  or  reservoir  drawdown.  The  importance  factors  and 
overall  condition  baswi  on  component  inspojtion  results  allows  a  condition  index  to  be 
computwi  at  every  stage  of  the  structural  hierarchy. 

1.4  Objective 

The  purpose  of  this  report  is  to  examine  whefliCT  this  Cl  methodology  can  be  used 
to  assess  structural  risk.  Since  the  consequences  of  failure  can  be  determined  separately, 
the  fociis  of  this  report  is  to  examine  if  this  condition  index  information  can  be  used  to 
compute  a  probability  of  failure  for  the  structure.  If  successfiil,  file  Corps  of  Engineer 
will  have  a  risk-based  means  to  prioritize  maintenance  dollare  using  periodic  inspection 
data.  Furthermore,  if  a  risk-based  approach  using  condition  indices  can  be  developed  for 
one  structure,  die  results  and  methodology  can  eventually  be  applied  to  other  structures  as 
well. 
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1.5  Report  Structure 

This  report  consists  of  seven  chapters.  Chapter  1  is  the  introduction  and 
describes  the  purpose  and  approach  to  the  research.  Chapter  2  examines  the  state  of  the 
art  and  the  existing  methods  for  conducting  a  reliability  analysis  and  a  condition  index 
assessment  of  structures.  The  issues  and  challenges  associated  with  using  Cl  data  to 
quantify  risk  are  addressed.  Chapter  3  looks  specifically  at  dam  spillways.  It  includes  a 
description  of  how  they  work  and  what  is  required  for  a  reliability  analysis.  The  Cl 
procedure  developed  by  Chouinard  et.al  (2003)  is  described.  Chapter  4  develops  a 
general  methodology  for  using  Cl  ratings  to  quantify  risk.  The  necessary  assumptions  are 
listed  along  with  their  implications.  The  methodology  and  specific  computations  are 
illustrated  on  a  simple,  hypothetical  example  problem.  Chapter  5  applies  the  previously 
described  methodology  to  dam  spillways.  The  Great  Falls  Spillway,  one  of  the  six 
Winnepeg  River  Plants  managed  by  Manitoba  Hydro,  is  used  as  an  example.  Chapter  6 
demonstrates  how  vulnerability  assessment  as  it  relates  to  potential  terrorism  could  be 
incorporated  into  the  process.  The  effect  is  illustrated  using  the  hypothetical  structure 
from  Chapter  4.  Finally,  Chapter  7  offers  conclusions  and  recommendations.  The 
strengths  and  weaknesses  of  the  proposed  method  are  discussed  along  with  suggestions 
for  future  research. 
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Chapter  2:  State  of  the  Art 


2.1  Risk  Assessment  and  ReliabUity  Analysis 

Risk  is  the  combination  of  failure  probability  and  consequences.  Failure  occurs 
when  a  structure  no  longer  performs  as  intended.  In  its  simplest  form,  if  the  cost  of  a 
structural  failure  is  $10,000  and  the  estimated  probability  of  failure  is  30%,  then  flie 
expected  value  of  the  risk  is  $3,000.  While  the  cost  of  a  failure  requires  a  number  of 
assumptions  and  computations,  this  study  focuses  on  determining  the  probability  of 
failure.  Reliability-based  methods  have  gained  an  increasing  acceptance  in  academic 
circles  and  are  beginning  to  be  acknowledged  and  used  by  engineer  practitionere. 
Reliability  methods  take  a  probabilistic  approach  to  designing  and  analyzing  a  structure 
where  the  result  is  a  reliability  index  or  a  probability  of  failure,  rather  than  the  traditional, 
deterministic  factor  of  safety.  In  structural  design,  critical  factors  such  as  loads, 
resistances,  deterioration  models,  and  human  errors  are  highly  random  and  the  associated 
uncertainties  must  be  quantified  to  adequately  assess  structural  risk  and  public  safety. 

Reliability  methods  are  computationally  more  difficult  and  complex  than 
traditional  deterministic  methods.  Such  methods  have  only  become  practical  as  a  result 
of  the  huge  progress  in  computer  methods  and  technology  over  the  past  two  decades.  In 
their  complete  form,  reliability  methods  often  involve  complex  convolution  integrals  that 
have  no  closed-form  solution.  Simplifi«i  methods  that  make  first  and  second  order 
approximations  have  been  highly  successful  at  reducing  the  complexity  of  computation 
while  still  producing  accurate  results.  Although  it  often  requires  a  large  number  of 
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simulations  to  obtain  good  solutions,  Monte  Carlo  methods  have  produced  excellent 
results. 


2.2  Reliability  Analysis  of  Structures 

A  reliability  analysis  begins  with  a  limit  state  equation  or  series  of  limit  state 
equations  that  govern  the  behavior  of  the  structure.  The  limit  state  equation  is  typically 
the  same  design  equation  that  is  xised  in  a  deterministic  approach  except  the  parameters  of 
every  random  variable  have  been  quantified.  The  yield  stress  for  steel  in  a  deterministic 
design  is  typically  36  ksi.  In  the  reliability-based  analysis,  the  yield  stress  for  steel  is 
more  appropriately  defined  as  a  normally,  or  log-normally,  distributed  random  variable 
with  a  mean  of  40.3  ksi  and  a  standard  deviation  of  3.9  ksi  (Nowak  1995).  A  structure  is 
considered  safe  or  reliable  if  its  capacity,  C,  exceeds  the  demand,  D,  placed  on  it: 

C 

C>D  or  C-D>0  or  —  >1  (2.1) 

D 

The  limit  state  surface  is  define  as  G(X)=C-D=0  where  X  is  the  vector  of  design 
variables  in  the  problem.  The  reliability  of  a  structure, /Jj,  is  the  probability  that  the 
strueture  survives  or  performs  safely.  If  the  capacity,  C,  and  the  demand,  D,  are  random 
and  the  uncertainty  can  be  quantified,  tiien  the  reliability  or  probability  of  safe 
performance, /Jj,  can  be  expressed  as: 

p,  =  P(G(X)  >  0)  =  />(C  -  £)  >  0)  =  JJ  (c,  d)dcdd  (2.2) 

C>D 

where/c^c)  and  fD(d)  are  the  probability  density  functions  of  C  and  D ,  respectively,  and 
fc.dc.d)  is  their  joint  probability  density  function.  Similarly,  the  probability  of  failure,  /y, 
can  be  defined  as 
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P/=1-P.  (2.3) 

The  computation  of  ps  can  be  quite  complex  depending  on  the  number  and  type  of 
imcertainties,  the  correlation,  and  the  number  of  variables  that  comprise  C  and  D. 

2.2.1  Reliability  Index 

The  most  common  means  of  communicating  reliability  is  through  a  reliability  index ,  fi , 
which  is  defined  as  the  shortest  distance  fi^om  the  origin  to  the  limit  state  surf^e  g(X)=0 
in  standard  normal  space.  In  the  case  whwe  C  and  D  are  independait,  normally 
distributed  variables,  the  reliability  index  is 

(2.4) 

where  p  is  the  mean  value  and  cr  is  the  standard  deviation  of  the  variables  C  and  D.  In 
this  case,  the  reliability  index  can  be  equated  to  the  probability  of  failme,;?/,  as  follows: 
p,=V(-P)  (2,5) 

where  is  the  distribution  fimction  of  the  standard  normal  variate.  In  this  case.  Table  2- 
1  shows  the  relatioiKhip  between  reliability  index  and  probability  of  failure.  When  the 
variables  are  not  normally  or  log-normally  distributed,  or  the  limit  state  function  is  not 
linear,  the  reliability  index  cannot  be  directly  related  to  the  probability  of  failure,  but  it 
remains  a  hi^ly  useful  means  of  communicating  the  notional  level  of  reliability  of  a 
design. 

2.2.2  Time  Dependent  Reliability 

When  attempting  to  make  decisions  about  a  structure  over  its  useful  life,  time 
becomes  an  important  variable.  Loads  tend  to  increase  over  time  and  the  resistance  tends 
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to  decrease  as  the  structure  deteriorates,  so  the  overall  reliability  can  generally  be 
expected  to  decrease  over  time.  If  the  load  and  resistance  of  the  structure  can  be 
projected  for  the  future,  the  approach  for  time  dependent  reliability  is  to  compute  the 
probability  that  a  structure  will  perform  satisfactorily  for  a  specified  period  of  time. 
Whereas  probability  of  failure  p/is  defined  as  the  probability  that  an  element  will  fail  at 
one  particular  time,  the  cumulative  distribution  function  Fj(t)  defines  the  probability  that 
an  element  will  fail  at  any  time  t : 

Fr{t)  =  P{T<t)  =  Pf{t)  (2.6) 

where  the  random  variable  T  represents  time  and  r  =  0.  The  probability  that  a  failure, 
p/t),  takes  place  over  a  time  interval  At  is  expressed  as 

/  {t)At  =  P{t^  <?</,+  At}  (2.7) 

dF 

where  the  probability  density  function  /(r)  =  — — .  It  is  assumed  that  the  derivative 

dt 

exists. 

The  reliability  is  often  expressed  in  terms  of  a  hazard  function,  H(t)  ,  also  called 
the  conditional  failure  rate.  The  hazard  function  expresses  the  likelihood  of  failure  in  the 
time  interval  ti  to  tj+dt  given  that  the  failure  has  not  already  occurred  prior  to  ti  and  can 
be  expressed  as 

^  (2.8) 

Ps^t) 

All  hazard  functions  must  satisfy  the  nonnegativity  requirement.  Their  units  are  typically 
given  in  failures  per  unit  time.  Large  and  small  values  of  H{t)  indicate  great  and  small 
risks,  respectively  (Leemis  1995).  The  hazard  function  is  used  in  the  cost-benefit 
analysis  to  justify  a  particular  project. 
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2.23  System  Reliability 

A  structural  system  may  have  multiple  components  and/or  failure  modes.  There 
are  many  advantages  gained  by  quantifying  the  inter-relationship  between  these 
components  and  analyzing  a  structure  as  an  entire  system.  For  example,  a  system 
analysis  can  reveal  that  some  repairs  are  more  important  than  others.  It  may  also  indicate 
that  while  each  individual  component  of  a  structure  may  have  adequate  safety,  the 
structure  as  a  whole  may  still  be  unsafe. 


2.23,1  Series  Systems 

If  the  failure  of  any  single  component  will  lead  to  the  failure  of  the  entire  structure,  the 
system  is  considered^  series  or  weakest  link  system.  If  a  structural  system  is  treated  as  a 
series  system  of  -z  elements,  the  probability  of  failure  of  the  system  ,pf. series  .can  be 
written  as  the  probability  of  a  union  of  events 
f  z  ^ 


P,ser^=f\U{gaiX)<0} 


(2.9) 


V«=!  2 


where  the  limit  state  of  element  a  is  defined  as  ^^(2^)= 0  and  the  failure 

state.  The  correlation  between  failure  modes  must  be  taken  into  account.  Considw  a 
series  systan  comisting  of  two  comjwnents  where  file  probability  of  failure  of  each 
individual  component  is  p/=0.01.  If  the  two  failure  modes  are  independent,  so  there  is  no 
correlation,  the  failure  probability  of  the  system  is 


P/.„,  =  1  -no  -  P/. ) = >  -  0  -  -  oo>) = 00'  00 


(2.10) 


If  the  two  events  are  perfectly  correlated,  the  failure  probability  of  the  system  is  piseries- 

Pfinax~0.0 1 


2.2.3.2  Parallel  Systems 

A  system  is  considered  a  parallel  system  if  the  system  requires  failures  of  all  the 
components.  For  a  parallel  system,  the  probability  of  failure  of  the  system  pf  parallel  can  be 
written  as  the  probability  of  an  intersection  of  events 


(2.11) 


Vo=l  J 

For  a  parallel  system  consisting  of  two  components  whose  individual  probabilities  of 
failure  are  p/=0.01,  the  system  failure  probability  is  upper  bounded  (first-order)  by 
Pf,  parallel-  Pfinm=0.01  if  the  two  failure  modes  are  perfectly  correlated  and  lower  bounded 


(first-order)  by 


P  f, parallel  =  (0.01)(0.01)  =  0.0001  (2.12) 

a=\ 

if  the  two  failure  modes  are  independent.  As  indicated  in  this  simplified  example,  there 
can  be  huge  errors  if  correlation  is  neglected  (Cornell  1967). 


2.3  Electrical  and  Mechanical  Reliability 

Reliability  analyses  for  electrical  and  mechanical  equipment  is  more  straight¬ 
forward  since  most  electrical  and  mechanical  components  are  mass  produced.  As  such,  a 
statistical  database  exists  based  on  the  actual  past  performance  of  the  same  components. 
In  contrast,  each  civil  structure  is  unique  and  there  is  no  statistically  significant  sample 
available.  For  electrical  and  mechanical  equipment,  component  life  is  divided  into  an 
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initial  period  where  failures  are  high  due  to  poor  workmanship  or  quality  control,  a  useful 
life  period,  and  a  wear-out  phase  where  failures  are  high  due  to  aging  and  deterioration. 
Tlie  reliability  or  probability  of  survival  at  any  point  in  time  during  the  useful  life  period 
is  computed  as: 

p,(()  =  e-"  (2.13) 

where  t  is  the  time  period  and  X  is  the  statistical  failure  rate,  usually  found  in 
manufacturer’s  data  or  a  table  of  wjuipment.  USAGE  (2001),  for  example,  lists  the 
failure  rate  of  a  butterfly  valve  as  ^=0.29  failures  per  10*  opea’ating  hours  and  X=6.SB 
failures  per  10*  operating  houis  for  a  DC  motor.  An  adjustai  failure  rate  Z'  can  be 
developed  based  on  actual  conditions  where 

Z'=K^K^K^Z  (2.14) 

The  K  factois  are  taken  from  tables  based  on  general  environmental  conditions,  stress 
rating,  and  temperature.  Given  the  reliability  at  points  in  time,  the  hazard  function  is 
calculated  as  described  earlier.  The  reliability  of  an  electrical  or  mechanical  sj^tem  is 
computed  by  creating  a  series-parallel  system  of  the  individual  components.  The 
electrical  and  mechanical  analysis  is  generally  not  combined  with  the  structural  reliability 
analysis  to  obtain  an  overall  system  reliability  index. 

2.4  Life-Cycle  Analysis 

Reliability  methods  are  often  used  to  optimize  the  life-cycle  a)st  of  a  structure 
and  to  make  future  maintenance  and  repair  decisions.  The  Corps  of  Engineers  is  currently 
using  this  methodology  to  justify  major  rehabilitation  of  navigation  structures.  Padula 
et.ai  (1994)  explains  the  process  in  detail  for  the  reliability  of  miter  gates  on  locks  to 
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include  load  forecasting,  deterioration  modeling  for  corrosion  and  fatigue,  and 
computation  of  a  hazard  function.  Currently,  the  reliability  is  computed  using  Monte 
Carlo  simulation. 

Reliability  methods  are  appropriate  for  maintenance  and  repair  planning 
throughout  the  useful  life  of  a  structure.  The  life-cycle  cost  includes  the  costs  of  initial 
construction,  preventive  maintenance,  repair,  inspection,  and  expected  cost  of  failure, 
among  others.  Life-cycle  optimization  must  balance  lifetime  cost  against  acceptable  risk. 
Reliability  methods  are  best  for  quantifying  that  acceptable  risk.  Reliability-based 
condition  assessment  is  needed  to  develop  and  update  the  life-cycle  strategy. 

2.5  Limitations  of  Reliability-Based  Methods 

The  biggest  drawback  to  reliability  methods  is  the  amount  of  input  data  needed  to 
perform  a  valid  analysis.  The  most  rigorous  option  is  to  conduct  tests  to  obtain  all  of  the 
input  data  needed  for  a  specific  project  such  as  strength  tests  of  concrete,  traffic  surveys 
on  a  bridge,  corrosion  rate  tests  on  steel,  storm  data  analysis  at  the  project  site,  etc.  This 
is  usually  prohibitively  expensive  in  terms  of  cost  and  time.  Past  experience  and 
previous  studies  in  the  literature  are  a  less  costly  source  of  data,  but  the  results  may  not 
be  applicable  to  the  project  at  hand.  Sensitivity  analyses  on  the  respective  variables  will 
often  help  identify  which  variables  merit  the  most  scrutiny.  Unfortunately,  reliability 
results  are  only  as  good  (or  bad)  as  the  input  data  that  support  them. 
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In  practice,  the  reliability  analysis  is  based  on  a  critical  failure  mode  due  to  the 
complexity  of  the  calculations.  On  a  miter  gate  for  example,  the  analysis  is  based  on  the 
stress  on  the  main  girder  or  the  number  of  fatigue  cycles.  In  reality,  there  are  many 
distresses  that  could  prevent  a  miter  gate  from  performing  as  intended  such  as  the 
condition  of  the  diagonals,  the  anchorage  arm,  the  motor  and  gear  assembly,  the 
alignment  of  the  gate,  etc.  No  good  approach  to  incorporate  all  of  these  variables  into  a 
structural  systan  for  a  reliability  analysis  has  yet  been  developed.  Russell  and  O’Grady 
(1996)  introduce  a  risk-basai  life-cycle  lock  rqrair  model  that  incorporates  a  S3retem 
approach  to  analyzing  a  lock  structure,  but  the  probabilistic  assessment  is  crude. 

2.6  Condition  Index  Assessment 

The  best  attempt  to  date  to  account  for  every  critical  aspect  of  structural  behavior 
has  been  the  condition  index.  A  Condition  Index  (Cl)  is  a  rating  between  0  and  100  that 
describes  the  «>ndition  of  a  structure  at  a  point  in  time.  The  Cl  is  based  on  a  series  of 
observations  by  an  inspector.  At  the  component  level,  the  inspector  classifies  what  he  or 
she  sees  into  the  predefined  descriptive  category  that  best  matches  the  observation.  At 
file  structure  or  system  level,  the  Cl  is  a  composite  score  derived  from  the  inspector 
observation  using  importance  or  weighting  factors.  The  Cl  methodology  was  developed 
to  prioritize  and  justify  non-recurring  operations  and  maintenance  investments  in  Corps 
infrastructure.  Table  2-2  shows  the  condition  index  rating  scale,  which  conveniently  is 
common  to  all  structures.  The  condition  of  a  structure  is  divided  into  seven  zones  that 
account  for  increased  levels  of  detaioration. 
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The  condition  index  system  is  developed  specifically  for  the  type  of  structure 
being  evaluated.  The  PAVER  system  was  originally  developed  for  Air  Force  runways 
[Shahin  et.al.  1976]  and  has  been  used  for  determining  the  serviceability  of  roads  and 
streets  [Shahin  and  Walther  1990].  USAGE  has  similarly  devised  systems  for  dams, 
locks,  and  other  navigation  structures  [Greimann  et.al.  1990].  Since  the  program  began  in 
the  mid-1980s.  Cl  systems  have  been  developed  for  miter  gates,  tainter  gates, 
embankment  dams,  sector  gates,  hydropower  structures,  and  coastal  projects  such  as 
breakwaters  and  jetties.  In  many  cases,  the  word  descriptions  that  describe  condition 
states  are  subjective  using  words  like  “minor,  major,  extensive,  constant,  increasing,  or 
significant”  to  describe  a  distress.  While  such  descriptions  are  the  best  that  can  be 
obtained  in  many  areas,  they  are  not  easily  quantified  numerically.  A  few  condition 
states  are  quantified  such  as  the  depth  of  erosion  categorized  as  0  to  1  feet,  1  to  3  feet,  or 
greater  than  3  feet  (Andersen  et.al.  1999). 

2.6.1  Condition  Index  Benefits 

The  benefits  of  the  Cl  system  include  the  standardized  quantification  of  condition, 
identification  of  specific  problems  in  structure,  establishment  of  a  condition  history  for  an 
individual  structure,  establishment  of  a  database  for  the  deterioration  of  a  class  of 
structures,  prioritization  and  efficient  allocation  of  scarce  maintenance  funds,  and  guiding 
less  experienced  inspectors  on  what  to  look  for  (Foltz  et.al.  2001).  A  desired  benefit  is  to 
use  the  Condition  Indices  in  risk  analysis  and  reliability.  Foltz  et.al.  (2001)  discusses  the 
use  of  CIs  in  risk  analysis,  as  an  input  to  reliability,  and  as  an  approximation  of 
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reliability.  They  concluded  that  since  CIs  do  not  examine  either  the  load  or  the  resistance 
of  a  structure,  it  is  not  possible  for  Cl  data  to  provide  a  direct  measure  of  reliability. 

2.6.2  Potential  Condition  Index  Uses 

The  CIs  focus  on  observable  deviations  from  a  desired  condition.  The 
subcomponent  obsCTvations,  if  they  are  relevant  and  sufficiaitly  detailed,  could  be  used 
to  update  or  enhance  the  reliability  analysis.  Estes  et.al.  (2004)  concluded  that  Cl  data 
could  not  be  used  to  compute  reliability  but  illustrated  how  quantified  Cl  data  could  be 
used  to  update  the  time  dependent  reliability  analysis  on  a  mitCT  gate.  Mlakw  (1994)  and 
Ayyub  et.al.  (1996)  treated  the  condition  index  rating  as  the  random  variable  to  compute 
reliability  of  hydropower  power  equipmait.  The  study  concluded  that  the  database  of 
data  on  hydropowerequipment  was  too  sparse  to  make  valid  conclusions,  but  the 
technique  showed  promise  if  sufficient  data  were  available. 

Because  CIs  are  based  on  structural  behavior  and  response,  they  may  ofF«:  an 
approximation  of  reliability.  If  so,  tiie  CIs  could  offer  a  low  cost  alternative  to  reliability 
studies  that  are  complex  and  expensive  and  can  only  be  justified  for  large  projects.  A 
low  cost  approximate  approach  would  allow  a  risk-based  analysis  for  smaller,  less 
expensive  projects  than  can  now  be  justified. 

2.7  An  Analogy 

The  difference  between  the  traditional  reliability  analysis  and  the  condition  index 
may  best  be  described  using  an  automobile  as  an  analogy.  A  reliability  analysis  of  an 
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automobile  might  pick  the  most  critical  failure  mode  such  as  the  performance  of  the 
engine.  The  capacity  is  the  horsepower  provided  by  the  engine.  The  demand  would  be 
the  horsepower  needed  to  get  the  folly  loaded  automobile  over  the  steepest  hill  that  it  is 
likely  to  encounter.  The  engine  will  degrade  over  time  as  it  ages  and  wears.  The 
probability  of  failure  is  the  probability  that  the  demand  on  the  engine  would  exceed  its 
capacity.  When  that  probability  becomes  too  hi^  as  determined  by  an  economic 
analysis,  the  engine  or  the  entire  automobile  is  replaced. 

In  reality,  nobody  replaces  an  automobile  using  that  logic.  An  automobile  is  a 
complex  system  consisting  of  a  drive  train,  electrical  system,  body,  foel  system,  and 
accessories.  For  most,  a  replacement  decision  is  based  on  a  complex  combination  of 
variables  such  engine  miles,  tire  wear,  body  rust,  inoperable  radio,  old  alternator,  and 
worn  brake  pads.  A  condition  index  for  the  automobile  would  be  derived  from  inspecting 
the  car  for  all  relevant  variables  such  battery  age,  corrosion,  shock  absorber  damping, 
engine  compression,  steering  tightness,  etc.  Based  on  the  relative  importance  of  each  of 
these  observations,  a  general  Cl  for  the  automobile  System  is  created.  As  a  transmission 
is  replaced  or  new  tires  are  purchased,  the  Cl  for  those  components  would  improve 
substantially  and  the  Cl  for  the  automobile  would  improve  relative  to  the  importance  of 
those  components  and  thus,  the  car  is  less  likely  to  need  replacement. 

If  an  individual  owned  a  fleet  of  automobiles,  that  system  Cl  would  be  very 
helpful  in  deciding  which  cars  to  replace  and  which  would  benefit  most  from  an 
overhaul.  If  that  Cl  data  was  probabilistic  in  nature  and  failure  was  defined  by  the 
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condition  at  which  components  or  systems  are  replaced,  then  a  risk  assessment  would  be 
possible.  That  is  the  approach  this  study  will  take, 

2.8  Approach  of  the  Study 

This  study  concludes  that  there  is  no  way  to  use  condition  index  data  to  replace 
the  traditional  reliability  analysis  for  a  structure.  They  are  too  dissimilar  and  serve  two 
different  piwposes.  It  may  be  possible  to  transform  the  condition  index  system  which  is 
deterministic  in  nature  into  a  probabilistic  analysis.  The  result  would  allow  the  same 
stochastic  techniques  involving  probability  of  failure  and  hazard  functions  to  be  used  in  a 
cost-benefit  analj^is.  This  report  will  propose  such  an  approach  by  treating  the  condition 
index  as  a  random  variable,  making  initial  assumptions  that  would  eventually  be 
modified  over  time  as  a  database  is  established,  and  using  existing  condition  state 
definitions  so  fliat  current  methods  and  accumulated  data  remain  valid. 
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Table  2-1 :  Relationship  between  Reliability  Index  and  Probability  of  Failure  for 
Normally  Distributed  Variables  and  Linear  Limit  State  Functions 


Reliability 
Index  (3) 

Probability  of 
Failure  (p/) 

0.0 

0.5000 

0.1587 

2.0 

0.02275 

3.0 

0.00135 

4.0 

0.0000316 

5.0 

0.000000286 

Table  2-2:  Condition  Index  Rating  Scale  for  Inspeeted  Structures  (Greimann  et.al.  1990) 


Condition  Description 

Zone 

Action 

■u 

Excellent :  no  noticeable  defects,  some  aging 
or  wear  visible 

1 

Immediate  action  not 
required 

70-84 

Very  Good:  Only  minor  deterioration  or 
defects  evident 

55-69 

Good:  Some  deterioration  or  defects  evident, 
function  not  impaired 

2 

Economic  analysis  of 
repair  alternatives 
recommended  to 
determine 
appropriate 
maintenance  action 

40-54 

Fair:  Moderate  deterioration;  function  is  still 
adequate 

25-39 

Poor:  Serious  deterioration  in  at  least  some 
portions  of  the' structure,  function  inadequate 

3 

Detailed  evaluation 
required  to  determine 
the  need  for  repair, 
rehabilitation  or 
reconstruction,  safety 
evaluation  required 

10-24 

Very  Poor:  Extensive  deterioration,  barely 
functional 

0-10 

Failed:  General  failure  or  failure  of  a  major 
component;  no  longer  fonctional 
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Chapter  3:  Spillways  on  Dams 


Since  the  specific  structure  for  this  report  is  spillways  on  dams,  this  chapter  will 
discuss  how  a  spillway  works,  what  is  required  for  a  reliability  analj^is,  and  the  details  of 
the  Cl  procedure  developed  by  Chouinard  et.al  [2003]. 

3.1  SpUlway  Gates 

The  puipose  of  a  spillway  is  to  control  the  flow  of  water  throu^  a  dam  and 
convey  the  water  fi-om  the  reservoir  to  the  tail  water  for  all  discharges  up  to  design  flood 
level  (USAGE  1990).  The  flow  of  water  is  controlled  by  gates  which  raise  and  lower  to 
permit  the  passage  of  water.  The  most  common  gates  on  spillway  crests  and  navigation 
locks  are  VCTtical  lift  (or  roller  gates)  that  are  lifted  with  a  hoist  or  a  crane  and  tainter 
gates  which  are  radial  in  shape  and  rotate  about  a  trunnion  pin  that  is  anchored  to  ftie 
piers.  Figure  3-1  (PBS  2004)  shows  a  vertical  lift  gate  failing  on  the  Folsom  dam. 

Failure  3-2  (Providence  2004)  shows  the  Fox  Point  Hurricane  Barrier  dam  with  a  series 
of  tainter  gates.  Both  gate  systems  consist  of  the  gate,  a  supporting  structure,  a  lifting 
device  in  the  form  of  a  crane  or  a  motor,  cables,  gears,  and  electrical  power. 

Tainter  gates  tend  to  have  lower  maintenance,  do  not  require  a  tower  to  house 
mechanical  equipment,  are  less  susceptible  to  fatigue,  and  are  more  economical.  The 
radial  shape  provides  an  efficient  transfer  of  load  through  the  trunnion,  allowing  for  a 
lower  hoist  capacity.  No  gate  slots  are  required  and  tainter  gates  have  a  fast  operating 
speed  (USAGE,  2000).  The  advantages  of  roller  gates  are  a  shorter  length  of  spillway 
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pier  required,  ease  of  fabrication,  reduced  erection  time,  and  a  simpler  design  of  supports 
due  to  the  single  direction  lifting  load.  Because  both  examples  cited  in  Chouinard  et.al. 
(2003)  are  both  vertical  lift  gates,  this  study  will  focus  on  those  structures. 

Vertical  lift  gates  rely  on  horizontally-framed  girders  as  their  main  support 
members  which  reinforce  a  thin  metal  sheet  that  forms  the  skin  plate.  Intercoastals 
provide  intermediate  support  in  the  vertical  direction.  Vertical  lift  gates  may  also  be 
formed  as  trusses  or  tied  arches.  Wheels,  revolving  around  a  fixed  axis,  are  attached  to 
the  ends  of  the  gate.  The  wheels  roll  in  a  prefabricated  slot  or  on  rails  mounted  in  a 
concrete  slot  as  the  gate  is  raised  and  lowered.  A  tractor,  slide  or  stoney  may  be  used 
instead  of  fixed  wheels.  The  gate  is  lifted  using  an  electric  motor,  cable  drum  hoist, 
hydraulic  cylitiders,  or  a  crane  (USAGE  1997). 

3.2  Reliability  Analysis 

The  spillway  gate  is  expected  to  withstand  various  loads  that  include  hydrostatic, 
hydrodynamic,  gravity,  equipment,  impact,  earthquake,  downpull,  thermal,  and  wind 
loads.  These  loads  all  have  uncertainties  associated  with  them  as  defined  by  the  random 
variables  that  describe  them.  A  reasonable  combination  of  these  loads  is  considered  and 
they  effect  the  structure  in  terms  of  member  stresses,  deformations,  vibrations,  fatigue, 
etc.  which  becomes  the  demand  on  the  structure.  The  spillway  gate  is  designed  with  a 
certain  capacity  to  resist  these  forces.  There  are  uncertainties  associated  with  the  strength 
of  the  material,  the  dimensions  of  the  cross-section,  and  the  theoretical  model  that  are 
also  qxumtified  as  random  variables.  The  probability  of  failure  is  the  probability  that 
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demand  on  the  structure  will  exceed  its  capacity  -  probably  in  terms  of  the  stress  on  the 
horizontal  girders.  Deformations  and  vibrations  are  typically  considered  serviceability 
criteria  and  not  as  critical  as  the  strength-based  stress  computations. 

In  a  time-dependent  reliability  analysis,  a  model  and  its  quantified  uncertainty  are 
needed  to  predict  how  the  structure  will  deteriorate  over  time  through  such  mechanisms 
as  section  loss  due  to  corrosion.  The  probability  of  failure  over  time  leads  to  the  hazard 
fimction  as  described  in  the  previous  chapter. 

For  file  vertical  lift  gates,  which  are  subjected  to  repeated  cyclic  loading,  fatigue 
may  be  the  critical  failure  mode.  For  fatigue,  the  reliability  is  based  on  critical  welded 
cormections  on  downstream  bracing  membere  that  are  coimected  to  the  downstream 
flange  of  the  horizontal  girders.  The  applied  stress  range,  number  of  loading  cycles  and 
the  magnitude  of  the  stress  concentrations  are  critical  considerations.  The  forecasting  of 
the  load  cycles  and  their  magnitudes  provides  the  time-dependent  analysis. 

33  Conditioii  Index  Methodology 

Qiouinard  et.al.  (2003)  develop«i  a  condition  assessment  methodology  for  dam 
spillwa>^  using  condition  index  ratings.  Dam  safety  with  respect  to  the  failure  modes  of 
overtopping  during  a  design  flood,  overtopping  diuring  load  rejection,  unintentional 
opening  of  the  gate,  failure  to  close  the  gate,  and  reservoir  drawdown  were  included.  The 
spillway  was  described  as  a  seven  level  hierarchy  as  shown  in  Figure  3-3.  Level  7,  the 
lowest  structural  level,  consists  of  individual  components  (shown  in  light  blue)  where  an 
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inspector  provides  a  rating  corresponding  to  a  descriptive  table.  Table  3-1,  for  example, 
shows  the  table  for  the  Hoist  Brake,  a  component  of  the  Force  Transmission  system.  A 
word  description  of  the  component  function  is  provided  along  with  a  description  of  both 
excellent  and  failed  behavior.  The  inspector  observes  the  brake  hoist  and  relates  his  or 
her  observations  to  the  categories  described  in  the  table.  A  range  of  Cl  scores  are 
provided  for  each  category.  Of  the  70  component  condition  tables  in  the  study,  all  are 
based  on  word  description  rather  than  quantitative  data. 

There  is  no  guidance  as  to  whether  the  inspector  chooses  the  highest,  lowest,  or 
some  average  score  for  the  rating.  Andersen  et.al.  (1999)  which  uses  these  same 
component  tables,  states  that  the  CIs  are  subjective  and  appears  to  leave  it  to  the 
individual  inspector  to  choose  an  appropriate  value.  If  there  are  several  condition  ratings 
that  comprise  a  component,  tiie  component  Cl  is  the  lowest  rating  of  the  indicator  group. 

The  higher  level  Cl  scores  for  sub-systems,  systems,  and  eventually  the  structure 
(shown  in  yellow  in  Fig.  3-3)  are  derived  from  the  component  Cl  scores  and  the 
importance  values  from  the  previous  level.  The  importance  factors  (I)  are  elicited  from 
expert  opinion  and  the  sum  of  the  importance  factors  at  any  given  level  is  equal  to  1.0.  If 
the  lower  level  elements  are  in  series,  meaning  that  the  system  fails  if  any  element  in  it 
fails,  th«i  the  Cl  for  the  next  higher  level  is: 

Cl  =y' I  Cl 

y=i 
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where  there  are  j  elements  in  level  i.  If  the  lower  level  elements  are  in  parallel,  where  all 
elements  must  fail  for  the  system  to  fail,  the  Cl  for  the  system  is: 


CL 


levelt^t 


(3.2) 


This  methodology  provides  a  deterministic  Cl  rating  at  every  structural  level  that 
can  ultimately  be  traced  back  to  inspectable  components.  The  analysis  includes  a  number 
of  relevant  variables  such  ss  the  ability  to  gather  information,  make  decisions,  and  gain 
access,  which  are  not  traditionally  included  in  a  structural  assessment.  The  importance 
factors  and  Cl  ratings  are  then  use  to  compute  priority  rankings  for  maintenance  of  the 
various  components.  Chouinard  et.al  (2003)  uses  the  Paugan  (Hydro-Quebec)  and  Great 
Falls  (Manitoba  Hydro)  as  illustrative  examples. 


3.4  Condition  Index  and  Risk  Assessment 

While  this  Cl  methodology  for  spillwaj^  incorporates  every  relevant  aspect  of 
performance  from  river  flow  measurements  and  emergency  generatore  to  lifting  devices 
and  gear  assemblies,  ftie  information  could  not  be  used  to  compute  the  probability  of 
failure  of  die  spillway  in  die  traditional  sense.  ThCTe  is  no  information  tiiat  helps 
compute  stresses  in  members  or  loads  over  time.  The  information  that  indicates 
corrosion  or  a  fatigue  crack  is  confined  to  a  single  component  table  (C.66:  Gate 
Structure)  and  the  information  is  not  sufficiently  quantified  to  be  useful.  Similarly,  since 
the  reliability  of  electrical  and  mechanical  components  is  based  operating  hours  and 
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defined  environment,  there  is  no  information  in  the  Cl  results  that  would  be  helpful.  It 
simply  reinforces  that  traditional  reliability  analysis  and  condition  index  ratings  are  too 
different  in  their  purpose  and  scope  to  be  interchangeable.  A  reliability  analysis  could 
never  effectively  incorporate  as  many  variables  as  Chouinard  (2003)  considers  in  the 
assessment  of  spillways;  the  analysis  would  be  too  complex. 

One  alternative  is  to  make  the  Cl  process  probabilistic  using  the  condition  index 
as  the  random  variable.  A  risk  analysis  is  then  possible  relative  to  failiore  as  defined 
within  the  Cl  system.  While  it  is  not  a  replacement  for  a  traditional  reliability  analysis 
and  has  certain  limitations,  it  provides  some  capabilities  that  do  not  exist  within  the 
current  deterministic  Cl  methods.  The  proposed  methodology  is  described  and  illustrated 
in  the  next  chapter  using  a  simple  hypothetical  structure  and  then  in  the  following  chapter 
using  the  data  and  structure  fi'om  the  Great  Falls  spillway. 
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Table  3.1 :  Component  Condition  Table  for  the  Hoist  Brake  —  Part  of  the  Force 
Transmission  System 


Hoist  Brake 

Function 

To  arrest  motion  of  gate  and  hold  gate  in  any  imsition  I 

Excellent 

FaiM 

position,  seizing  of  biake  I 

Indicator 

0-9 

10-24 

25-39 

40-54 

55-69 

70-84 

Scoi^ 

Commits 

Can  arrest  motion  at 
any  position,  not 
sei^ 

X 

Limited  slippage 
without  impacting 
operation;  no  slip  but 
vibration 

X 

■ 

X 

Limits  slippage  diat 

impacts  operation 

X 

X 

Biml 

X 

Figure  3.1 :  Photo  of  the  Failure  of  the  VCTtical  Gate  Spillway  on  flie  Folsom  Dam  (PBS, 
2004) 
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Figure  3.2;  Photo  of  the  Tainter  Gates  on  the  Fox  Point  Hurricane  Barrier  Deim 

(Providence,  2004) 
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Levell:  |  Level  2:  j  Level  3:  1  Level  4:  [  Levels:  j  Levels:  |  Level?: 

Spillway  j  Dam  Safety  '  Type  of  '  Operational  •  Systems  i  Sub-systems  i  Components 

Classification  ;  Functions  j  Gate  [  Systems  and  |  |  | 

Equipment 


Chapter  4:  Probabilistic  Condition  Index  Methodology 

4.1  Condition  Index  as  Random  Variable 

This  chapter  proposes  a  probabilistic  approach  to  the  condition  index  rating 
system  where  the  Cl  is  the  random  variable.  The  approach  will  require  a  number  of 
assumptions,  the  reasonableness  of  which  can  be  debated  and  modified  as  acquired  data 
provides  better  information.  With  the  Cl  as  the  random  variable,  the  probability  of 
failure  is 

Pf  ~  actual  —  ^^faihire)  (4.1) 

Initially,  it  is  assumed  that  the  CIs  are  normally  distributed  and  independent.  The 
analysis  will  be  simpler  and  the  level  of  accuracy  attained  with  the  approach  does  not 
justify  the  additional  complexity  of  considering  other  distribution  types  or  correlation 
between  variables. 

4.2  Assumptions 

The  parameters  (mean  value  and  standard  deviation)  of  the  actual  condition  index 
Clactuai  will  be  determined  by  the  component  condition  table  and  the  confidence  in  the 
inspector  to  correctly  assign  the  correct  condition  state  to  an  inspected  component.  In 
this  study,  it  is  assumed  that  the  inspector  will  classify  the  structure  correctly  95%  of  the 
time,  although  some  other  reasonable  values  (90%,  80%)  could  be  chosen.  Factors  such 
as  inspector  experience,  quality  assurance  spot  checks,  training  programs,  formal 
certification,  periodic  meetings,  and  published  guidance  should  be  considered  in  choosing 
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this  value  (Estes  and  Frangopol,  2003).  It  is  assumed  that  the  5%  inspector  error  is 
equally  distributed  on  the  high  and  low  sides. 

When  an  inspector  assigns  a  condition  state,  there  is  a  range  of  values  that  can  be 
quite  large.  To  be  conservative,  it  is  assumed  that  the  mean  value  of  the  Cl  is  at  the 
center  of  the  range  when  the  condition  state  is  first  identified.  If  file  condition  state  range 
is  fi-om  70  -  84,  for  example,  the  mean  value  would  be  CI=77  at  the  first  inspection 
where  the  structure  enters  that  condition  state  as  shown  in  Fig.  4-1.  Based  on  the 
assumed  inspector  qualifications,  the  probability  of  obtaining  a  value  of  CI<84  when  the 
structure  is  actually  in  this  condition  state  is  97.5%  or  0.975.  The  standard  deviation  a 
can  be  computed  as: 

P(C/  <  84)  =  0.975  =  <I>(^^~--)  = 

^  ^  (4  2) 

^  (84-77)  (84-77)  ^ 

(0.975)  1.96 

where  ®  is  the  standard  normal  variate  whose  value  can  be  found  in  the  standard  normal 
distribution  tables  and  /r  is  the  mean  value  of  the  condition  state. 

The  structure  is  ^sumed  to  transition  linearly  through  the  condition  state.  The 
design  life  of  the  structure  initially  dictates  how  long  a  structure  is  expected  to  remain  in 
a  specific  condition  state.  The  mean  value  will  shift  linearly  toward  the  lower  end  of  the 
condition  state  over  time  as  shovra  in  Fig.  4,1.  The  standard  deviation  remains 
vmchanged.  If  a  structure  remains  in  a  condition  state  longer  that  anticipated,  the  mean 
value  of  the  Cl  will  remain  at  the  lowest  value  until  an  inspection  reveals  that  the 
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structure  has  entered  a  different  condition  state.  In  the  example  above,  the  mean  value 
would  remain  at  CI=70.  Greimann  et.al.  (1990)  attempted  to  model  condition  index 
deterioration  using  an  exponential  function  and  Ayyub  et.al.  (1996)  modeled  it  based  on 
the  sparse  data  collected.  If  the  linear  assumption  is  not  correct,  the  actual  inspection 
data  will  allow  the  model  to  be  updated  to  reflect  actual  structural  behavior  as  will  be 
shown  with  an  example  in  this  chapter.  In  the  absence  of  any  data,  a  linear  Cl 
deterioration  assumption  seems  reasonable. 

4.3  Failure 

Failure  occurs  when  a  structure  no  longer  performs  as  intended.  It  is  assumed  that 
failure  is  associated  with  some  sort  of  repair,  rehabilitation  or  reconstruction.  Therefore 
any  modifications  or  adjustments  to  the  failure  definition  can  be  based  on  the  historical 
record  of  repair  actions.  The  initial  assumption  of  Clfaiiureis  N[25, 12.75]  which  indicates 
a  normally  distributed  variable  with  a  mean  value  of  C/=25  and  a  standard  deviation  of 
cf=12.  75.  The  assumption  is  based  on  the  condition  index  definition  shown  in  Table  2.2, 
where  replacement  occurs  in  the  Cl  range  of  0  -  40.  From  tiie  description,  it  appears  that 
a  small  number  of  repairs  will  occur  in  the  40-54  range  where  there  is  moderate 
deterioration.  Similarly,  a  responsible  manager  of  structures  will  not  wait  until  a 
structure  no  longer  functions  (Cl  range  0-9)  to  make  a  repair  in  most  cases.  Greimann 
et.al.  (1990)  used  CI=40  as  the  indicator  of  a  potentially  hazardous  situation  when 
developing  a  Cl  methodology  for  miter  gates.  Fig.  4.2  shows  the  Clfeiiure  distribution  and 
the  assumed  percentage  of  replacements  that  would  occur  within  the  Cl  ranges.  This 
quantification  of  failure  will  be  used  throu^out  the  study. 
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4.4  System  Condition  Index 

Higher  level  Cls  for  subsystems,  systems  and  entire  structures  will  also  be 
probabilistic.  Fig.  4.3  shows  the  simplest  possible  series  system  and  parallel  system, 
each  consisting  of  two  components,  A  and  B.  Component  A  has  Clactuai  =  N[85, 5]  with 
an  importance  factor  1=0.3,  while  Component  B  has  Clacumi  =  N[45, 20]  with  an 
importance  factor  1=0,7.  For  the  series  system,  the  mean  value  of  the  Clsj^tem  is  computed 
using  Eqn.  3.1  as 


^^System  =  =/.C/,+4C4  =(0.3)(85)  +  (0.7)(45)  =  57 

y=i 


(4.3) 


Because  the  equation  is  linear  and  the  variables  CU  and  CIb  are  independent  and  normal 
variates,  die  standard  deviation  of  the  system  condition  index  cci system  is  (Ang  and  Tang, 


1975) 


’cu 


=  =  V(0.3)“{5)=  +(0.7)’(20)'  =  14.08 

Vi=i 


(4.4) 


The  mean  value  of  the  parallel  system  condition  index,  C^ystem  is  computed  using  Eqn. 
3.2  as 


Cl 


1 


V/jC/>/^C/l  V(0-3)'(85)'  +(0.7)'(45)' 


System 


2  .J./2 

A 


^i03f  +(0.7)' 


=  53.2 


(4.5) 


A  reasonable  first  order  approximation  of  the  standard  deviation  of  the  system  condition 
index  aa  system  is  (Ang  and  Tang,  1975) 


32 


—  System 


^2^2  _ 
)  ^C/, 


all^Cll+aincil 


B±B^ 


{n+n){ciiii+ciiii) 


(5)^  (0.3)"  (85)"  +(20)^  (0.7)"  (45)^ 
'((0.3)"  +(0.7)")((85)"(0.3)"  +(45)"  (0.7)" 


=  14.34 


(4.6) 


Appendix  A  discusses  the  significance  of  these  equations  further.  These  equations 
provide  the  probabilistic  parameters  of  the  Cl  at  successively  higher  levels. 


4.5  Example  Structure 

The  methodology  is  illustrated  on  a  simple  hypothetical  structure  shown  in  Fig. 
4.4.  The  structure  consists  of  three  parallel  components  (Al,  A2,  and  A3)  in  series  with 
components  B  and  C.  The  components  (in  blue)  are  inspected  and  given  a  Cl  rating 
based  on  condition  tables.  Components  Al,  A2,  and  A3  form  sub-system  A.  The 
structure  is  comprised  of  sub-system  A  and  component  B  and  C.  The  importance  factors 
at  each  level  are  shown  in  Fig.  4.4(b). 


Figure  4.5  shows  the  condition  tables  and  the  distributions  they  represent  for 
component  Al,  A2,  and  A3.  The  condition  evaluation  for  component  A  was  divided  into 
four  condition  states  (CS)  with  ranges  as  indicated.  The  condition  index  range  for  CSl 
was  70-100  which  indicates  a  mean  value  of  Cl  =  85  when  the  condition  state  is  first 
entered.  The  standard  deviation  for  CSl  is 


(100-85)  (100-85) 

4)"' (0.975)  ~  1.96 


(4.7) 
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The  parameters  for  the  other  condition  states  were  computed  in  a  similar  manner. 
The  distributions  for  the  four  condition  states  when  the  condition  states  are  first  entered 
are  shown  in  Fig.  4.5(b)  along  with  the  distribution  for  failure.  The  probability  of  failure 
of  a  component  will  be  the  likelihood  of  the  actual  condition  index  being  less  than  the 
defined  failure  condition  index.  Figures  4.6  and  4.7  show  the  condition  tables  and  the 
resulting  distributions  for  components  B  and  C,  respectively.  Component  B  was  divided 
into  seven  condition  states,  while  Component  C  had  only  three.  The  analysis  will  be 
most  effective  when  a  component  can  be  divided  into  more  discrete,  clearly  defined 
categories,  but  this  is  clearly  not  possible  for  all  componaits. 

4.5  Condition  Index  over  Time 

The  structure  and  its  components  are  assumed  to  have  a  50  year  design  life.  With 
a  linear  transition  of  condition  states,  the  structure  should  reach  the  zone  2  and  zone  3  (Cl 
=40)  dividing  line  (see  Table  2.2)  after  50  years.  The  components  A,  B,  and  C  should 
pass  throu^  1.67, 4,  and  1.33  condition  states,  respectively,  during  this  period  based  on 
the  condition  tables  in  Figures  4.5  through  4.7.  Figure  4.8  illustrates  the  predicted 
condition  state  transition  for  components  A,  B,  and  C  assuming  tiiat  the  structure  is 
inspected  every  two  years.  The  data  points  are  the  mean  Cl  values  at  points  in  time. 
Components  A  and  C  show  a  steep  drop  fi'om  CSl  to  CS2  during  the  first  50  years  of 
design  life.  Component  B  shows  more  gentle  drops  as  the  component  passed  through 
CSl  through  CS4  during  the  same  period,  which  reflects  the  greater  gradation  of 
condition  states. 
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Based  on  the  condition  state  transition,  the  mean  Cl  for  component  A  at  years  2  and  4  is 
equal  to 


^^A,Yecu2  ~ 


(85-70) 


=  84.0 


^^A,Year4  ~ 


(85-70) 

'iS-« 


=  82.9  (4.8) 


Similarly,  the  mean  Cl  for  component  B  at  year  2  is 


_  (92,5-85) 

(X-l)(2) 

4 


91.2 


(4.9) 


The  condition  state  transition  proceeds  in  this  manner  until  the  component  passes  to  the 
next  lower  condition  state  where  the  mean  Cl  is  the  midpoint  of  the  new  condition  state. 


The  mean  Cl  of  the  entire  structure  is  computed  using  equation  2.1  for  a  series 
system.  Because  components  Al,  A2,  and  A3  are  identical  in  thpir  performance,  the 
mean  Cl  for  sub-system  A  is  identical  to  its  components.  At  the  time,  t=0  years,  when 
the  structure  is  first  placed  into  service,  the  mean  value  and  standard  deviation  of  the 
system  structure  are  (Eqs.  3.1  and  3.2): 

CIsnten,.Year,  =  (0.2)(85)  +  (0.6)(92.5)  -h  (0.2)(85)  =  89.5 
Sys.cn, {1 .65f  -H  (0.6)' (3.83)"  +  (0.2)' (7.65)"  =  3.16 

By  year  2,  the  mean  value  of  the  system  is  shown  below  and  the  standard  deviation  does 
not  change. 

CIsys.em.Year2  =  (0.2)(84.0)  (0.6)(91 .2)  +  (0.2)(84.2)  =  88.3  (4.1 1) 

The  mean  value  of  the  system  Cl  is  also  shown  in  Figure  4.8.  The  system  Cl  follows 
closely  with  component  B  because  the  importance  factor  was  0.6  for  that  component 
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which  was  weighted  three  times  as  great  as  the  other  two  components.  If  the  importance 
factors  changed,  the  system  Cl  curve  would  reflect  that. 


4.6  Risk  Analysis  Using  Condition  Indices 

Because  the  CIs  have  been  defined  in  probabilistic  terms,  a  risk  analysis  is 
possible  relative  to  the  Cl  definition  of  failure.  Because  the  variables  are  normally 
distributed  and  independent,  the  reliability  index  is  computed  using  Eq.  2.4.  The 
reliability  index  for  component  A  and  for  the  system  at  year  2,  for  example,  is  computed 


as: 


PA.Yearl 


_  ^^Acual 


Cl 


Faihfre 


84-25 


2  .  2 
^Actual  ^  ^Fmitire 


883-25 


System  ^Yearl 


^(3.16)" +(12.5)" 


slilMf  +(12.5)" 


=  4.82 


=  3.96 


(4.12) 


Figure  4.9  shows  the  reliability  index  for  components  A,  B,  and  C  and  for  the 
structure.  Not  surprisingly,  the  graphs  look  very  similar  to  the  mean  Cl  values  shown  in 
Figure  4.8  over  the  same  70  year  time  period.  Figure  4,10  shows  the  probability  of 
failure  over  this  period  for  the  components  and  structure.  The  probability  of  failure  for 
component  A  and  the  system  at  year  2  are  computed  using  Eq,  2,5. 

Pf  A  Year2  =  =  4>(-3.96)  =  1  -  <D(3.96)  =  1  -  0.999963  =  0.000037 

(4.13) 

Pf,Sys.n,.Ye^2  =  <l»M-82)  =  7.15(10)'" 
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The  system  probability  of  failure  is  fit  to  a  Weibull  distribution  to  provide  a 
smooth  curve.  The  hazard  function  is  obtained  using  Eq.  2.8.  Figure  4.10  shows  for 
example  that  the  probabilities  of  failure  of  the  system  for  years  40, 42,  and  44  is: 

P f,System,YearAa  P f ,System,YearAl  ~  ^ P f,System,YearHA  ~ 

Eq.  2.3  shows  that  the  probability  of  survival  is: 

Ps.Sys,e.,Y.ar^  =1-0.1076  =  0.8924  P,,Sys,en.,Year42  =0.8737  P,,Sys.e.,,Year44  =0.8527 


(4.15) 


The  hazard  function  for  years  42  and  44  is  computed  as: 
dFj.  (0.1263-0.1075) 


m 


System,Year42 


dt 


42-40 


=  0.009389 


^(■0  System,Year42 
•f  Syslem,Year44 


fit)  0.009389 


Hit) 


p,it)  0.8737 
(0.1473  -  0.1263) 
44-42 
0.01047 


=  0.01075 
=  0.01047 


Systemffear44 


0.8527 


=  0.01228 


(4.16) 


This  indicates  that  if  the  structure  has  not  already  failed  by  year  42,  the  likelihood  of  the 
structure  needing  replacement  in  the  next  year  is  0.01075.  Figure  4.1 1  shows  the  hazard 
function  for  the  system  over  a  70  year  period.  Because  the  probability  of  failure  jumps 
when  condition  states  change  the  hazard  curve  is  not  smooth  and  shows  spikes.  Using 
real  data,  the  numerical  differentiation  will  almost  never  produce  a  smooth  curve.  A 
best-fit  Weibull  distribution  is  fit  through  the  data.  The  Weibull  distribution  requires 
two-parameters  y  and  0  such  that  best  fit  hazard  function  through  the  data  is  express  as 
[Padula  et.al.  1994]: 


The  parameters  are  estimated  through  linear  regression  analysis.  The  data  for  time  t  and 
reliability  over  the  76  year  period  is  converted  to  x  and  y  data  using  the  equations: 

^rear42=ln(0  =  ln(42)  =  3.738 

y,„a  =ln(ln—)  =  ln(ln(-^))  = -2.002 

U.o/3/ 


The  x-y  data  is  fitted  to  the  linear  equation 

y  =  ax+b  (4.19) 

Using  the  data  for  die  70  year  period,  regression  analysis  showed  that  a=-22. 6 7  and 
b=5.483.  The  parametera  yand  ^are  computed  as: 


y  =  6  =  5.483 
0  =  —  .  ^ 


e‘>^  e  S'*” 


62.50 


(4.20) 


The  hazard  functions  for  the  best  fit  curve  for  yeare  42  and  44  are: 


h{t) 


WeihidUyearAil 


h{t) 


WeibeUnyear44 


_  5.483  42  .(s.483-1) 

62.5  ^62.5^ 

_  5.483 . 44  .(5.483-1) 
62.5  ^62.5^ 


=  0.01477 


=  0.01819 


(4.21) 


Figure  4. 1 1  shows  the  best-fit  h^ard  function  for  the  entire  time  period. 


Consider  the  failure  consequences  of  flie  structure  as  shown  in  Figure  4. 12.  There 

is  a  30%  chance  that  if  the  structure  fails,  the  consequaices  will  be  sli^t  and  the  cost 

will  be  only  $200,000.  At  the  other  extreme,  there  is  a  5%  chance  that  the  failure  will  be 

catastrophic  and  cost  $3.6  million.  The  expected  cost  of  failure  based  on  the  event  tree  is: 

E(Cost)j,„,^  =  (0.30)($200,000)  +  (0.50)($450,000)  +  (0.15)($ 1,200,000) + (0.05)($3,600,000) 
=  $645,000 

(4.22) 
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At  year  42,  the  expected  annual  cost  of  keeping  the  structure  in  service,  assuming  no 
maintenance  cost,  is 

£:(CojOm  =  $645,000(0.01477)  +  $0(1  -  0.01477)  =  $9,527  (4.23) 

The  present  value  cost  Cpv  of  a  new  structure  at  year  42  is  $200,000  with  an  anticipated 
design  life  of  50  years.  Assuming  a  discount  rate  of  6%,  the  annual  cost  over  the  50  year 
life  is 


Cp,r{\  +  ry  ^  $200,000(0.06)(l+0.06)^° 
(l  +  r)"-l  ”  (1  +  0.06)^®-! 


$12,689 


(4.24) 


The  new  structure  is  not  justified  at  year  42  because  the  annual  cost  of  $  12,689  exceeds 
the  annual  benefit  of  $9,527  provided  by  a  new  structure. 


Figures  4.8  through  4.12  reflect  that  a  risk-based  cost-benefit  analysis  is  possible 
using  Cl  data.  The  inspection  results  in  this  example  reflect  a  structure  that  performed  as 
predicted  and  all  of  the  assumptions  are  valid.  Admittedly,  the  assumptions  are  not  based 
on  data,  but  as  time  passes  and  the  Cl  data  for  a  structure  becomes  available  through 
actual  inspection,  the  assumptions  can  be  modified  and  the  life  cycle  maintenance  plan 
can  be  updated.  The  advantage  is  that  the  data  needed  for  the  analysis  is  exactly  the  data 
that  is  being  inspected. 


4.7  Actual  vs.  Expected  Structural  Performance 

The  next  examples  illustrate  what  occurs  if  the  structure  does  not  behave  as 
predicted  or  if  the  assumptions  prove  invalid.  Figure  4. 1 3  shows  the  results  for  a 
structure  where  every  component  is  deteriorating  at  twice  the  expected  rate.  The  changes 
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in  condition  state  for  the  components  show  a  steeper  drop  than  in  Figure  4.8.  The  actual 
Cl  for  the  sj^tem  is  still  a  factor  of  the  importance  and  condition  state  of  it  constituent 
components.  Figure  4.13  compares  the  actual  structure  Cl  to  the  predicted  structure  Cl 
over  forty  years.  The  life  of  the  actual  structure  will  be  20-30  years,  rather  than  the 
design  life  of  50  years,  but  the  inspection  results  show  within  the  first  decade  of  life  that 
the  structure  is  behaving  differently  than  expected  and  a  revised  life-cycle  maintenance 
plan  can  be  developed.  The  same  analysis  described  earlier  is  conducted  for  the  more 
rapidly  deteriorating  structure.  Figure  4.14  shows  the  actual  hazard  function  and  best-fit 
Weibull  hazard  function  for  the  more  rapidly  deteriorating  structure. 

Similarly,  Figure  4.15  shows  die  results  for  a  structure  where  every  component  is 
deteriorating  at  half  the  expected  rate.  The  Cl  values  for  the  components  flatten  out  as 
the  structure  behaves  better  than  expected  and  the  mean  Cl  remains  at  the  lowest  value  in 
the  condition  state  until  an  inspector  finds  that  it  has  deteriorated  to  the  next  condition 
state.  The  actual  structure  Cl  is  compared  to  the  original  prediction  and  the  expected  life 
of  the  actual  structure  is  around  75  years,  raflier  than  50.  This  traid  is  evident  by  year  20, 
so  there  is  plenty  of  opportunity  to  defer  rq>air  and  rehabilitation  to  a  hi^er  priority 
project.  Figure  4.16  shows  the  lujtual  data  and  best-fit  hazard  functions  for  the  less 
deteriorated  structure. 

Figure  4.17  overlays  die  diree  hazard  functions  fi'om  Figures  4.1 1, 4.14,  and  4.16 
for  the  original  structure,  the  structure  deteriorating  at  double  the  expected  rate,  and  the 
structure  at  half  the  deterioration  rate.  If  a  cost-benefit  analysis  was  conducted  at  year 
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30,  the  hazard  function  values  h(30)  would  be  0.00327,  0.0501,  and  0.000179, 
respectively.  They  all  differ  by  an  order  of  magnitude  and  would  make  a  huge  difference 
in  the  economic  analysis.  It  underscores  that  the  initial  assumptions  may  be  drastically 
wrong,  but  the  periodic  inspection  and  updating,  allows  for  significant  correction  over 
time. 

4.8  Effect  of  Repairs  over  Time 

Figure  4.18  considers  the  case  where  components  A1  and  B  are  deteriorating  at 
half  the  expected  rate,  A3  and  C  at  double  the  expected  rate,  and  A2  at  the  expected  rate. 
The  mean  Cl  rating  for  the  actual  structure  and  the  predicted  structure  are  both  shown. 
Component  C  completely  fails  at  year  40,  but  the  structure  Cl  is  only  moderately  affected 
because  the  importance  factor  of  component  C  was  only  1=0.2  and  Component  B,  which 
is  behaving  better  than  expected,  has  an  importance  factor  of  1=0. 6.  At  Year  40, 
Component  C  is  replaced  and  its  Cl  reflects  the  new  condition  by  Year  42.  The  Cl  of  the 
system  improves  somewhat  as  a  result,  indicating  a  better  condition  of  the  overall 
structure.  At  Y ear  46,  the  mean  Cl  of  System  A  rises  from  5 1  to  67,  but  not  all  the  way 
back  to  its  new  condition  of  Cl  =  85. 

Figure  4.19  shows  the  individual  components  Al,  A2,  and  A3  of  the  parallel 
subsystem  A.  At  Year  46,  component  A3  needs  to  be  replaced  and  its  Cl  returns  to  its 
original  value  of  CI=85.  Because  components  Al  and  A2  are  still  performing  well,  they 
are  not  replaced.  Thus,  the  Cl  of  system  A  improves,  but  not  back  to  its  original 
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condition,  after  the  replacement  of  A3.  Because  System  A  is  a  parallel  system.  Equations 
3.2  and  4.6  were  used  to  compute  the  mean  Cl  and  standard  deviation  of  the  system. 

4.9  Alternative  System  Approaches 

The  treatment  of  a  structure  as  a  system  is  controversial  because  there  are  several 
alternative  approaches  that  could  be  taken; 

1 .  The  approach  taken  by  Chouinard  (2003)  and  this  report  treats  the  hi^er  level  Cl  as 
the  overall  condition  of  the  stnicture  based  on  the  component  CIs  and  their  relative 
importance.  This  allows  entire  structures  competing  for  the  same  resources  to  be 
compared  at  a  higher  level.  Returning  to  the  automobile  analogy,  if  a  manager  has  a  fleet 
of  cars,  one  car  might  be  ten  years  old,  have  experienced  a  series  of  electrical  problems, 
and  never  had  the  brakes  replaced.  A  second  car  is  ei^t  years  old  and  is  showing  signs 
of  body  rust  and  a  feltering  transmission.  A  system  Cl  would  be  helpful  in  assessing 
which  car  would  benefit  most  finm  scarce  maintenance  dollars.  The  probabilistic 
analysis  would  help  determine  if  either  project  amid  be  justified  economically. 

2.  A  second  approach  is  to  compute  the  system  reliability  using  equations  2.10  and  2.12 
for  series  and  parallel  systems,  respectively.  This  traditional  reliability  approach  should 
produce  a  series  system  Cl  that  would  be  lower  than  any  of  the  component  CIs.  Similarly, 
the  Cl  of  a  parallel  system  should  be  higher  than  any  of  the  component  CIs,  which 
invalidates  equations  3 . 1  and  3.2. 
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For  example,  using  the  structure  in  Fig.  4.4  and  the  probabilities  of  failure  in  Fig. 
4.10,  the  approaches  are  compared  at  Year  0  and  Year  40  of  structural  life.  Table  4.1 
shows  the  probabilities  of  failure  for  the  components  at  Year  0  and  Year  40,  as  well  as 
the  Cl  for  sub-system  A  and  the  overall  system  using  the  currently  proposed  approach. 
Subsystem  A  is  a  parallel  system  consisting  of  components  Al,  A2,  and  A3,  which  are  all 
behaving  the  same.  If  the  components  are  independent,  the  reliability  of  subsystem  A  at 
Year  0  is  determined  using  Eq.  2.12: 

Ch,a,-sys-A  =  (0.0000274)(0.0000274)(0.0000274)  =  2.07  *  1  O''"  (4.25) 

If  the  components  are  perfectly  correlated,  then  the  reliability  is  equal  to  the  reliability  of 
the  strongest  component 

CIsub-sys-A  =  =  0.0000274  (4.26) 

Similarly,  if  the  system  components  (Subsystem  A,  Components  B  and  C)  are 
independent,  the  reliability  of  the  overall  system  at  Year  0  is  determined  by  Eq.  2.10  for 
the  series  system  as: 

=  1  -  [(1  -  2.07  ♦  1 0“‘^  )(1  -  2.01  *  1 0"’  )(1  -  0.0000274)]  =  0.0000277  (4.27) 

If  the  components  are  perfectly  correlated,  then  the  reliability  is  equal  to  the  reliability  of 
the  weakest  component 

Chystem  =  P /.max  =  0.0000274  (4.28) 

Table  4. 1  shows  these  results  for  both  Year  40  and  Year  0.  There  is  a  large 
difference  between  the  results  obtained  using  the  currently  proposed  method  and  the 
traditional  reliability  approach,  even  on  this  small  hypothetical  structure,  because  the  two 
approaches  are  measuring  different  things.  Since  most  structees  are  series  systems,  the 
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traditional  reliability  approach,  whether  one  is  looking  at  statistical  independence  or 
perfect  correlation,  reflects  the  probability  of  any  small  thing,  however  minor,  going 
wrong  on  the  system.  On  the  automobile  example,  it  might  mean  a  dead  battery,  a  burnt 
out  headlight,  or  a  hole  in  the  muffler.  As  parts  of  a  series  system,  any  of  those  would 
cause  the  systan  to  fail  and  some  action  would  need  to  be  taken  before  the  automobile 
could  be  safely  operated  again.  There  is  no  way  to  account  for  the  importance  of 
components,  so  a  faulty  tail  light  is  viewed  with  the  same  degree  of  seriousness  as  a 
blown  mgine  in  the  evaluation  of  the  system.  In  this  simple  example,  fliere  was  not  a  big 
difference  between  the  results  when  considoing  independence  versus  perfect  correlation. 
For  a  seven  level  hierarchy,  the  difference  will  be  more  pronounced  and  wnsidering 
correlation  between  components  becomes  more  important. 

The  proposed  Cl  method  measures  the  likelihood  of  replacing  or  overhauling  the 
entire  system.  It  allows  two  similar  systems  with  diffe’ent  distresses  to  be  compared  in 
terms  of  allocation  of  scarce  maintenance  dollars.  The  importance  of  components  is  folly 
considered  in  the  analysis.  A  tail  li^t  would  have  such  minor  importance  that  foe  system 
Cl  would  be  negligibly  affected  by  it.  This  makes  sense  as  nobody  would  replace  or 
rehabilitate  an  automobile  based  on  a  faulty  tail  light,  but  they  would  over  a  blown 
engine. 


The  two  approaches  are  different  in  what  they  are  attempting  to  measure  and 
would  almost  never  produce  foe  same  answer.  In  a  series  system,  foe  probability  of 
failure  will  always  be  at  least  as  high  as  that  of  its  weakest  member.  The  probability  of 
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failure  in  a  parallel  system  will  always  be  as  low  as  or  lower  than  that  of  its  strongest 
member.  Using  the  weighted-average  approach  advocated  here,  the  probability  of  failure 
of  the  system  will  always  be  somewhere  between  that  of  its  strongest  and  weakest 
member. 

3.  A  third  approach  is  to  recognize  that  any  Cl  value  above  component  level  is 
meaningless  and  should  not  be  used  because  it  is  misleading.  Foltz  et.al.  (2001) 
acknowledge  that  there  is  considerable  disagreement  on  the  need  for  system  or  summary 
condition  indices.  Those  most  opposed  are  those  who  favor  using  Cl  data  for  reliability 
assessment  and  would  advocate  the  traditional  reliability  approach  over  the  system 
behavior  proposed  here.  A  system  Cl,  if  well  constructed,  provides  valuable  summary 
information  in  a  standardized  context  on  the  condition  of  an  entire  class  of  structures. 
Such  information  is  a  highly  credible  means  of  describing  the  state  of  the  infrastructure 
for  funding  priorities  and  public  safety.  It  is  also  the  only  way  to  compare  which 
structures  most  need  to  be  replaced  or  rehabilitated. 

4.10  Summary 

This  chapter  has  developed  a  methodology  for  using  Cl  ratings  based  on  visual 
inspection  results  to  perform  a  type  of  risk  based  analysis  of  a  structure.  The  approach 
was  illustrated  on  a  hypothetical  series-parallel  structure.  Through  a  series  of 
assumptions,  failure  and  condition  state  randomness  were  defined,  component  and  system 
CIs  were  computed,  and  a  cost-benefit  analysis  involving  the  reliability  index,  probability 
of  failure  and  hazard  function  was  performed.  The  example  problem  demonstrated  how 
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these  assumptions  can  be  updated  and  modified  over  time  as  actual  inspection  data 
become  available.  The  issues  associated  with  s^tem  level  CIs  were  discussed. 

The  example  illustrates  another  danger  of  using  higher  level  Cl  ratings  for 
structures.  It  is  easy  to  neglect  a  minor  component  that  must  be  repaired  or  replaced  for 
the  structure  to  fimction.  If  a  failing  component  has  a  small  importance  factor  and  other 
components  are  performing  better  than  expected,  it  could  easily  be  missed  by  an  analyst 
looking  only  at  structure-level  CIs.  Returning  to  the  analogy  of  the  automobile,  while 
nobody  would  justify  a  major  rehabilitation  or  replacemait  of  an  automobile  because  the 
battery  is  dead,  the  car  will  still  not  function  without  a  new  battery.  The  system  n^s  a 
safeguaifi,  such  as  a  red  flag  whenever  any  component  Cl  mean  value  rating  falls  below 
CI=40  and  a  amsdous  decision  to  rq)air  or  not  repair  needs  to  be  made.  With  the 
methodology  demonstrated  on  a  small  hypothetical  structum,  the  next  chapter  will 
attempt  to  apply  it  the  complex  and  very  real  Great  Falls  spillway  structure  used  by 
Chouinard  et.al.  (2003). 
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Table  4.1 ;  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components 


Year  0 

Item 

Probability  of  Failure 

Component 

System; 

Current 

Approach 

System: 

Traditional 

Approach 

Statistical 

Independence 

System: 

Traditional 

Approach 

Perfect 

Correlation 

2.75E-05 

2.00E-07 

2.75E-05 

2.75E-05 

2.07E-14 

2.75E-05 

4.59E-07 

2.77E-05 

2.75E-05 

Year  40 

Item 

Probability  of  Failure 

Component 

System: 

Current 

Approach 

System: 

Traditional 

Approach 

Statistical 

Independence 

System: 

Traditional 

Approach 

Perfect 

Correlation 

0.1984 

0.0583 

0.3665 

' 

HKlESQHlii 

0.0078 

0.1984 

0.4081 

0.3665 
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Figure  4,1:  Typical  Condition  State  Definition  in  Probabilistic  Terms 


Probability  Density 


Figure  4.2:  Cl  Definition  of  Failure  in  Probabilistic  Terms 
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Figure  4.4;  (a)  Hypothetical  Series-Parallel  Structure,  (b)  Structural  Hierarchy  for 
Hypothetical  Structure 
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Figure  4.5:  Condition  Table  and  Distribution  for  Component  A  which  is  Applicable  for 
Components  Al,  A2,  and  A3 
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Figure  4.6:  Condition  Table  and  Distribution  for  Component  B 
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Figure  4.7:  Condition  Table  and  Distribution  for  Component  C 
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Figure  4.8:  Expected  Condition  State  Transition  for  the  50  Year  Life  of  Components  A, 
B,  and  C  and  the  Entire  Structure.  Data  Points  are  the  Mean  Cl  Values  at  Points  in  Time. 


Figure  4.9:  The  Reliability  Index  {p)  for  Components  A,  B,  and  C  and  the  Entire 
Structure  over  a  70  Year  period. 
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Figure  4.10:  The  Probability  of  Failure  for  Components  A,  B,  and  C  and  the  Entire 
Structure  over  a  70  Year  period. 
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Figure  4.1 1 :  Hazard  Functions  for  a  Structure  Based  on  Actual  Results  and  the  Best  Fit 
Weibuli  Distribution  Throu^  the  Data 


Figure  4.12:  Cost  Failure  Tree  for  Structure  at  Year  42  of  Useful  Life  Based  on 
Consequences  of  Failiue  and  Hazard  Function 
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Figure  4.13  Mean  Condition  Index  for  a  Structure  that  is  Deteriorating  at  Double  the 
Predicted  Rate. 


Figure  4.14:  Hazard  Functions  Based  on  Actual  Results  and  the  Best  Fit  Weibull 
Distribution  Throu^  the  Data  for  a  Structure  that  is  Deteriorating  at  Twice  the  Expected 
Rate. 
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Figure  4.16:  Hazard  Functions  Based  on  Actual  Results  and  the  Best  Fit  Weibull 
Distribution  Through  the  Data  for  a  Structure  that  is  Deteriorating  at  Half  the  Expected 
Rate. 
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Figure  4.17:  Hazard  FunctioM  for  Structures  that  are  Deteriorating  at  the  Expected  Rate, 
Twice  the  Expected  Rate,  and  Double  the  Expected  Rate. 
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Figure  4.18:  Mean  Condition  Index  for  a  Structure  Where  Components  A1  and  B  are 
Deteriorating  at  Half  the  Predicted  Rate  and  Components  A3  and  C  are  Deteriorating  at 
Double  the  Predicted  Rate. 


Figure  4.19:  Mean  Condition  Index  for  Parallel  System  A  Where  Component  A1  is 
Deteriorating  at  Half  the  Predicted  Rate  and  Component  A3  is  Detaiorating  at  Double 
Ihe  Predicted  Rate  and  A2  is  Deteriorating  at  the  Expected  Rate. 


Chapter  5:  The  Great  Falls  Spillway 
5.1  The  Structural  Hierarchy 

The  Great  Falls  Dam  shown  in  Fig.  5.1  is  one  of  six  dams  and  power  plants 
managed  by  Manitoba  Hydro  on  the  Winnipeg  River.  The  power  plant  has  a  132  MW 
capacity,  and  the  spillway  is  capable  of  discharging  4,390  cubic  meters  per  second  of 
water.  Construction  was  completed  in  1928  (Manitoba  Hydro  2004).  The  Great  Falls 
Spillway  consists  of  four  80  meter  long  vertical  lift  gates  with  each  having  its  own 
dedicated  hoist  (Chouinard  et.al.  2003).  The  dam  hierarchy  is  shown  in  Fig.  5.2  and 
consists  of  seven  levels.  The  hipest  level  (Level  1)  is  not  shown  and  reflects  the  overall 
spillway  structure.  Hi^er  levels  are  possible  if  one  considers  the  entire  dam  and  power 
plant  structure  where  the  spillway  is  one  element  of  that  structure.  An  even  hi^er  level 
is  possible  if  the  entire  system  of  dams  along  the  Winnipeg  Riva*  is  analyzed  and  the 
Great  Falls  dam  is  one  structure  in  the  Pine  Falls,  Great  Falls,  McArthur  Falls,  Seven 
Sisters,  Slave  Falls,  Pointe  Du  Bois  system. 

Level  2  rq>resents  the  dam  safety  ftmctions,  which  are  the  various  failure  modes. 
They  include  overtopping  due  to  a  design  flood,  overtopping  due  to  a  load  rejection,  an 
unintentional  opening,  failure  to  close,  and  drawdown  of  reservoir  to  prevent  a  dam 
failure.  This  report  examines  overtopping  due  to  a  design  flood  as  shown  in  Fig.  5.2. 
Chouinard  et.al.  (2003)  considers  all  five  failure  modes.  The  procedure  is  essentially  the 
same  for  all  failure  modes  with  only  the  importance  factors  changing.  Since  there  is  only 
one  type  of  gate,  level  3  is  bypassed  directly  to  level  4  which  divides  the  spillway  system 
into  operational  systems  and  equipment  systems.  The  operations  systems  shown  in  level 
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5  consist  of  the  information  needed  to  make  a  decision,  die  decision  process  itself,  and 
the  ability  to  get  people  to  the  equipment  they  need  to  operate.  The  equipment  systems 
represent  die  hoist/gate  system  and  the  electrical  system  that  provides  the  power.  These 
systems  are  divided  into  the  sub-systems  in  level  6.  The  hoist/gate  sub-system  consists  of 
the  spillway  gates,  their  lifting  mechanisms  and  the  support  structure.  Because  each  gate 
has  its  own  dedicated  hoist,  the  hoist/gate  sub-s>^tem  is  modeled  as  a  parallel-saies 
system  shown  in  Fig.  5.3. 

Each  of  these  sub-systans  is  furtha-  broken  down  into  components  and  sub¬ 
components  indicate  by  the  letters  a  throu^  h  in  Fig,  5.2,  Figs.  5.4  throu^  5.9  show 
the  components  that  these  letters  rg)resent.  Fig.  5.4,  for  example,  shows  the  components 
and  sub-components  for  the  Gathering  Information  system.  The  information  components 
include  snow  measuring  stations,  a  flow  prediction  model,  wata  level  indicator  system, 
gate  position  indicators,  etc.  Those  blocks  indicated  by  light  blue  (light)  are  inspected 
directly  and  classified  according  to  the  categories  listed  on  a  component  table.  The  table 
numba  (i.e.,  C.2,  C.4)  Jfrom  Chouinard  et.al.  (2003)  is  listed  in  the  figures.  The 
(xrmponent  table  for  snow  measuring  stations,  for  example,  is  shown  in  Table  5.1.  There 
are  thra  condition  states  and  they  are  subjective,  ratha  tlmn  objective  in  their 
description.  The  second  condition  state  has  a  substantial  range  from  Cl  =25  to  CI=69. 
Thae  are  some  ranges  (10-24  and  70-84)  that  are  not  represented.  This  is  acceptable  as 
furtha  definition  and  delineation  may  not  be  possible.  Genaally,  a  better  and  more 
credible  assessment  of  structural  condition  will  be  obtained  if  the  component  can  be 
divided  into  as  many  clearly  defined  condition  states  as  possible. 
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Those  components  in  yellow  (dark)  were  not  inspected  directly.  Their  Cl  scores 
were  obtained  from  sub-component  Cl  results  and  importance  factors.  Table  5.2  shows 
the  componait  table  for  the  Reservoir  Level  Indicator  System.  It  consists  of  three  sub¬ 
components:  water  level  indicators,  data  acquisition  device,  and  data  transmission.  These 
sub-components  are  classified  into  six,  four  and  four  condition  states,  respectively. 

These  condition  states  have  differing  ranges  of  Cl  values  that  will  produce  differing 
degrees  of  \mcertainty  in  their  results.  Fig.  5.5  follows  the  same  convention  for  file 
components  and  sub-components  that  comprise  the  Decision  Process  and  the  Access  and 
Operations  systems.  Fig.  5.6  covers  the  Power  Supply,  Cables  and  Controls,  and  Support 
Structure  systems.  Fig.  5.7  is  the  gate  system  and  Figs.  5.8  and  5.9  look  at  the  hoist 
system  components  and  sub-components. 

Chouinard  et.al.  (2003)  appeared  to  use  the  lowest  score  of  sub-components  and 
components  to  derive  Cl  scores  for  sub-systems  and  systems.  This  study  opted  to  use 
importance  factors  at  all  levels.  This  maintains  a  pure  hierarchy  and  allows  a  component 
with  multiple  deficiencies  to  be  distinguished  from  a  component  with  only  one.  If  a  red 
flag  is  implemented  whenever  Cl  <  40  at  the  lowest  inspectable  level,  there  should  be  no 
danger  of  a  deficiency  going  unnoticed.  The  importance  factors  are  listed  in  Figs.  5.2 
through  5.9.  Those  listed  in  purple  (dark)  circles  were  obtained  from  expert  opinion  and 
used  in  Chouinard  et.al.  (2003).  Those  shown  in  light  green  (light)  were  developed  for 
this  report,  with  the  assumption  of  equal  importance  among  sub-components,  unless  there 
was  a  compelling  reason  to  assume  something  else. 
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5.2  Inspection  Results 

The  actual  inspection  results  from  the  Great  Falls  Spillway  were  used  to  apply  the 
methodology  proposed  herein  to  this  structure.  Using  the  hierarchy  shown  in  Figs.  5.2 
throu^  5.9,  the  inspection  results  were  combined  with  the  importance  factors  shown  in 
these  figures  to  obtain  the  mean  Cl  values,  standard  deviations,  reliability  indices,  and 
probabilities  of  failure  for  the  components  and  systems  at  each  level.  The  starting  point 
was  the  inspection  results.  It  is  assumed  throu^out  tihat  this  is  an  initial  iiwpection  and 
tile  mean  value  will  be  at  the  midpoint  of  the  condition  state.  If  these  were  follow-on 
inspections,  the  mean  value  would  shift  as  describe  in  Section  4.5  and  Fig.  4.1.  TTie 
mean  value  and  standard  deviation  for  the  Reservoir  Level  Indicator  System  is  obtained 
from  the  inspection  results  in  Table  5.2  using  equation  4.2. 

Water  Level  Indicator:  Range  Classified  by  Inspector  —  85-100 
Mean  Value:  Cl  =  92.5 


Standard  Deviation:  =  — ^^  =  3.83 

1.96 

Data  Acquisition  Device:  Range  Classified  by  Inspector  —  40-84 
Mean  Value:  Cl  =  62.0 


(5.1) 


c*  j  84.0  -  62.0  „ 

Standaid  Deviation:  cr  = - =  11.22  /5,2) 

1.96  ^  ^ 

The  computations  for  the  Data  Transmission  sub-component  are  the  same  as  the 

Water  Level  Indicator.  In  the  actual  inspection,  the  inspector  was  giv«i  considerable 

leeway  in  producing  an  actual  Cl  score.  The  inspector  chose  to  give  the  Water  Level 

Indicator  a  Cl  score  of  85,  tiie  lowest  in  the  category,  but  gave  the  Data  Transmission  a 

Cl  score  of  95.  The  inspector  gave  the  Data  Acquisition  Device  a  Cl  score  of  65,  which 
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is  somewhere  in  the  middle  of  a  fairly  large  condition  state.  There  is  no  guarantee  that 
another  inspector  would  see  it  the  same  way.  The  approach  proposed  in  this  study  only 
asks  the  inspector  to  choose  the  correct  condition  state,  which  should  provide  much 
greater  consistency  between  inspectors  and  thus,  Cl  scores. 


The  mean  Cl  and  standard  deviation  for  the  Reservoir  Level  Indicator  Component 
which  is  a  series  system  comprised  of  the  Water  Level  Indicator,  Data  Acquisition,  and 
Data  Transmission  subcomponents  are  computed  using  equations  4.3  and  4.4. 

Cljuj-co^ponen,  =  jCI j  =  (0.33)(92.5)  +  (0.33)(62.0)  +  (0.33)(92.5)  =  82.3  (5.3) 


= ,  'L'Wi  =  V(0-33)=(3.83)’  +(0.33)' (11. 22)=  +  (0.33)=  (3.83)'  =  4.15 

V  y=i 


(5.4) 


The  reliability  indices  and  probabilities  of  failure  are  computed  using  equations  2.4  and 
2.5 


Pru-< 


82.3-25 


Component 


.15)" +(12.5)' 


=  4.27 


Pf.Ru-a..po.e..  =0(-4.27)  =  9.61(10)- 


(5.5) 

(5.6) 


Using  the  same  approach  for  the  other  components  and  sub-components,  Table 
5.3  shows  the  results  for  the  Gathering  Information,  Decision  Process,  and  Access  and 
Operations  systems.  The  components  and  sub-components  are  nxxmbered  to  reflect  the 
hierarchy  shown  in  Figs.  4.2  through  4.9.  The  importance  factors,  mean  Cl  value, 
standard  deviation,  and  reliability  index  are  listed.  Those  rows  in  light  blue  (light)  were 
inspected  directly  from  the  Component  Table  listed  and  those  rows  in  yellow  (dark) 
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reflect  higher  order  indices  derived  from  a  combination  of  inspection  results  and 
importance  factors.  Table  5.4  shows  the  same  information  for  the  components  and  sub¬ 
components  of  the  Power  Supply,  Cables  and  Controls,  and  Supporting  Structure  sub¬ 
systems.  Tables  5.5  and  5.6  reflect  the  Gate  and  Hoist  sub-systems,  respectively. 

Table  5.7  combines  the  results  from  Tables  5.3  through  5.6  to  provide  the  Cl  and 
reliability  results  for  the  sub-systems,  systems,  and  overall  structure.  The  mean  Cl  of  the 
overall  structure  is  CI=84.02.  The  structure  is  in  excellent  condition  and  the  reliability 
index  of  fi=4.61  reflects  little  likelihood  fliat  it  needs  to  be  replaced  or  rehabilitate!.  TTie 
least  functional  sj^tan  of  the  structure  was  the  Decision  Making  Process.  It  was  part  of 
the  Operational  System  which  was  given  a  smaller  importance  factor  {1=0.3)  than  the 
Equipment  Sj^tem  (7=0. 7)  and  thus  had  less  effect  on  the  overall  structure  rating. 

Assuming  that  the  components  were  all  independent  caused  the  standard  deviation 
of  the  condition  indices  to  get  progressively  smaller  as  the  calculations  progressed  up  the 
hierarchy.  This  is  not  a  conservative  ^sumption  as  the  smaller  standard  deviations  will 
result  in  smaller  reported  probabilities  of  feilure.  An  ^sumption  of  perfect  correlation 
would  have  produce  hi^er  standard  deviations  at  the  system  levels.  Assuming  either 
perfect  correlation  or  estimating  flie  actual  correlation  would  have  complicated  flie 
computations  and  would  not  necessarily  have  been  any  more  correct.  This  issue  merits 
further  study. 
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Tables  5.3  through  5.7  illustrate  that  the  methodology  introduced  in  Chapter  4  on 
a  simple  hypothetical  structure  is  equally  applicable  to  a  large  complex  structure  and  the 
level  of  difficulty  is  not  much  higher  than  a  deterministic  analysis.  The  condition  of  the 
structure  at  successively  higher  levels  reflects  the  inspection  results  and  the  relative 
importance  of  the  various  components.  The  best  results  will  be  obtained  when  the 
component  condition  tables  are  delineated  into  as  many  clearly  defined  condition  states 
as  practicable. 

53  System  Probability  Approaches 

Returning  to  the  discussion  in  Section  4.9,  the  Cl  system  proposed  in  this  report  is 
compared  to  liie  traditional  reliability  approach.  Table  5.8  compares  the  two  approaches 
for  the  Gathering  Information,  Decision  Process,  and  Access  and  Operations  Systems. 
Using  the  Reservoir  Level  Indicator  from  Table  5.2  as  an  example,  the  results  fi-om  Table 
5.3  indicate  the  following  for  the  sub-components; 

Water  Level  Indicator  fi=5.07  pf=0(-p)=0(-5.O7)=2.OO(l(r^) 

Data  Acquisition  Device  P=2.18  p/=0(-P)=0(-2.18)=O.O147  (5.7) 

Data  Transmission  P=5.07  pj=0(-P)=0(-5.O7)=2.OO(lO'^) 

Eq.  5.6  computed  the  probability  of  failure  using  the  current  proposal.  Assuming  the 
components  are  independent,  Eq.  2.10  is  used  to  compute  the  probability  of  failure  for  the 
Reservoir  Level  Component  which  is  a  series  system  of  the  listed  sub-components: 
Pf,Ru-o>n,po.en.  =^1  ”  ((1  ”  2.00  *  1 0"’  )(1  -  0.01 47)(1  -  2.00  *  1 0"’ ))  =  0.01 47  (5.8) 

Assuming  the  components  are  perfectly  correlated,  the  component  probability  is: 

P  f,RLI -Component  P  f  .msn-Snb-component  0.0147  (5.9) 
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In  this  case,  the  independent  and  perfectly  correlated  results  were  identical  because  the 
probability  of  failure  of  the  Data  Acquisition  Device  was  so  much  higher  than  fliat  of  the 
other  two  sub-components.  The  same  process  is  used  for  the  other  components  in  Table 
5.8.  There  was  a  larger  discrepancy  between  the  independent  and  perfectly  correlated 
results  for  the  Gathering  Information  system  of  which  the  Reservoir  Level  Indicator  was 
a  part  --  0.287  for  independent  versus  0.098  for  perfectly  correlated.  Tables  5.9  through 
5.1 1  show  the  same  calculations  for  additional  components,  the  gate  and  the  hoist, 
respectively. 

Table  5.12  shows  the  results  for  the  higher  level  sub-systems,  systems,  and  the 
entire  structure.  Using  the  propose  approach,  the  probability  of  failure,  which  reflects 
the  probability  of  the  structure  ne^ing  replacement  or  rehabilitation  is 
=1.96*10^ 

This  is  a  low  likelihood  of  replacement  which  makes  sense  given  the  excellent  condition 
of  the  structure  and  its  most  important  systenw  and  components.  Whether  that  number  is 
accurate  at  all  merits  further  study.  Using  the  traditional  reliability  approach,  if  flie 
components  are  independent,  the  probability  of  failure  is  0.445  and  if  they  are  perfectly 
correlated,  the  failure  probability  is  0.098.  Given  all  the  components  and  systrans  on  the 
structure,  there  is  somewhere  between  a  10%  and  45%  chance  that  something  will  fail 
somewhCTe  on  the  structure.  It  will  most  likely  occur  in  the  Operations  rather  than  the 
Equipment  portion  of  the  structure  and  some  estimation  of  correlation  becomes 
important. 
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One  could  argue  that  a  traditional  reliability  analysis  should  never  include  the 
Gathering  Information  and  Decision  Process  systems  in  the  analysis.  They  do  not  truly 
represent  series  systems.  If  the  snow  measuring  devices  or  the  public  protection  warning 
system  fail,  they  do  not  really  affect  whether  the  spillway  gate  will  go  up  when  it  is 
needed.  The  system  condition  index  described  in  this  report  does  not  lend  itself  well  to 
traditional  system  reliability  methods.  An  advantage  to  the  approach  used  herein  is  that 
the  analyst  can  incorporate  anything  that  he  or  she  thinks  is  relevant  to  the  structure  into 
the  analysis.  Because  the  goal  is  to  attain  an  overall  score  for  the  structure  to  allow 
comparison  with  other  structures,  any  variable  can  be  included,  even  if  it  is  difficult  to 
define.  One  additional  variable  may  be  vulnerability  of  the  structure  to  attack,  sabotage, 
or  terrorism,  which  will  be  the  subject  of  the  next  chapter. 
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Td)le  5.1:  Component  Condition  Table  and  Actual  Inspection  Results  for  Snow 
Measuring  Stations  -  Part  of  the  Gathering  Information  System  on  the  Great  Falls  Dam 


Table  5.2:  Component  Condition  Table  and  Actual  Inspection  Results  for  Reservoir 
Level  Indicator  -  Part  of  the  Gathering  Information  System  on  the  Great  Falls  Dam 


Table  5.3:  Condition  Index  and  Reliability  Results  for  the  Gathering  Information, 
Decision  Process,  and  Access  and  Operations  Systems  on  the  Great  Falls  Spillway 


Item 

Number 

Importance 

Mean  Cl 

Standard 

Deviation 

Reliability 

Index 

Reference 

Table 

Level  7:  Components 

Gathering  Information 

7a 

76.72 

2.01 

4.01 

River  Flow  Measurement 

7a  1 

0.11 

82.33 

4,15 

4.27 

C.1 

Water  Level  Indicator 

7a1.1 

0.33 

92.50 

3.83 

5.07 

Data  Acquisition  Device 

7a1.2 

0.33 

92.50 

3.83 

5.07 

Data  Transmission 

7a1.3 

0.33 

62.00 

11.22 

2.18 

Reservoir  Level  Indicator 

7a.2 

0.11 

82.33 

4.15 

4.27 

C.2 

Water  Level  Indicator 

7a.2.1 

0.33 

92.50 

3.83 

5.07 

Data  Acquisition  Device 

7a.2.2 

0.33 

62.00 

11.22 

2.18 

Data  Transmission 

7a.2.3 

0.33 

92.50 

3.83 

6.07 

Precipitation  &  Temp,  Gauge 

7a.3 

0.11 

77.33 

4.15 

3.90 

C.3 

Precip  &  Temp  Gauges 

7a.3.1 

0.33 

47.00 

11.22 

1.29 

Data  Acquisiticm  Device 

7a.3.2 

0.33 

92.50 

3.83 

5.07 

Data  Transmission 

7a.3.3 

0.33 

92.50 

3.83 

5.07 

Snow  Measuring  Mode! 

7a.4 

0.11 

47.00 

11.22 

1.29 

C.4 

Flow  Predicition  Model 

7a5 

0.11 

47.00 

11.22 

1.29 

C.9 

Weather  Forecasting 

7a.6 

0.11 

77.00 

3.57 

3.93 

C.5 

Ice  and  Debris  Management 

7a.7 

0.11 

92.50 

2.21 

5.21 

C.6 

Monitoring 

7a.7.1 

0.33 

92.50 

3.83 

5.07 

Management 

7a.7.2 

0.33 

92.50 

3.83 

5.07 

Control  Equipment 

7a.7.3 

0.33 

92.50 

3.83 

5.07 

Gate  Position  Indicator 

7a.8 

0.11 

92.50 

2.21 

5.21 

C.8 

Positton  Indicator 

7a.8.1 

0.33 

92.50 

3.83 

6.07 

Data  Acquisition  Device 

7a.8.2 

0.33 

92.50 

3.83 

5.07 

Data  Transmission 

7a,8.3 

0.33 

92.50 

3.83 

5,07 

Third-Party  Flow  Data 

7a,9 

0.11 

92.50 

3.83 

5.07 

C.7 

Decision  Process 

WM 

62.10 

4.27 

2.76 

Data  Processing 

0.20 

92.50 

3.83 

5.07 

Ssheet 

Analysis 

7b.2 

0.20 

47.00 

11.22 

1.29 

Ssheet 

Decision  Process 

7b.3 

0.20 

47.00 

11.22 

1.29 

C.10 

Public  Protection  Warning  System 

7^.4 

0.20 

62.00 

11.22  . 

2.18 

C.12 

C^eration  Procedure 

7b.5 

0;20 

62.00 

7*94 

2  46 

C.15 

Standard  Operating  Procedures 

7b.5.1 

0.50 

62.00 

11.22 

2.18 

Autonomous  Operating  Proc. 

7b.5.2 

0.50 

62.00 

11.22 

2,18 

Ax:cess  and  Opera^ons 

7C 

92.50 

1.43 

5  26 

Avail,  and  htobilizatlon  (Load  Rejedik) 

7c.1 

0.20 

92.50 

2.71 

5.18 

C.14 

Availabllty 

7c.  1.1 

0.50 

92.50 

3.83 

5.07 

Mc^lization 

7C.1.2 

0.60 

92.50 

3.83 

6,07 

Avail,  and  Mobilization  (Load  RejecUo 

7c,2 

0.20 

92,50 

2.71 

6.18 

C.1 3 

Avaitabtity 

7C.2.1 

0.50 

92.60 

3.83 

5.07 

Mobilization 

7c2.2 

0.60 

92.50 

3.83 

5.07 

Qualification  /  Training  of  Operator 

7c.3 

0.20 

92.50 

3.83 

5.07 

C.18 

Local  Acc^s 

7c.4 

0.20 

92.50 

2.71 

6.18 

€.22 

Pedestrian  Access 

7C.4.1 

0.50 

92.50 

3.83 

5.07 

Keys  and  Locks 

7C.4.2 

0.60 

92.50 

3.83 

5,07 

Lighting  System 

7c.5 

0.20 

92.50 

3.83 

5.07 

C.29 

Table  5.4:  Condition  Index  and  Reliability  Results  for  the  Power  Supply,  Cables  and 
Controls,  and  Supporting  Structure  Sub-Systems  on  the  Great  Falls  Spillway 


1 

1 

1 

[standard  i 

1  Reliability 

[Reference 

Item 

L^vel  7:  Component 

i^ower  Supply 

86.26  1 

2.07  j 

4.74 

Local  or  Em^ency  Genemtors 

7d 

1.00 

86.25 

2.07 

4.74 

C.25 

Frequency  and  Voltage 

7d.1 

0.08 

85.00 

7.66 

4.03 

Engine  Temperature  /  Oil  Pressuri 

7d2 

0.08 

85.00 

7.65 

4.03 

Starting  Sequence 

7d.3 

0.08 

85.00 

7.66 

4.03 

^to^se  and  X^biatiion 

7d.4 

0.08 

7.65 

4.03 

Functional  Test 

7d.5 

0.08 

mm 

3.83 

5.07 

Fuel 

76M 

0.08 

92.K) 

3.83 

5.07 

7d.7 

0.08 

85.00 

7.65 

4.03 

Battery  Charge 

7d.8 

0.08 

85.M 

7.^ 

4.03 

Alternator 

7d.9 

0.08 

mm 

7.65 

4.03 

Lubrication 

7d.10 

0.08 

85.00 

7.65 

4.03 

Ckjoling  System 

7d.11 

0.08 

■SB 

4.03 

Intake  and  Exhaust  System 

7d.12 

0.08 

1  85.00  1 

1  7.65 

4.03 

CaUes  and  Conbxils 

7e 

87.94 

2.57 

4.84 

Und«^round  and  Encs^ed  Cables 

7e,1 

0.25 

85.00 

5.41 

4.33 

C.24 

Irmirtation 

7eJ,1 

om 

BSM 

7.65 

4;03 

T^mlnatofs 

7e.l2 

om 

85.(K) 

7.65 

4.03 

Fe^er  Cabl^ 

7e.2 

025 

mm 

5.41 

4.33 

C.25 

Insulation 

7e.2.1 

0.60 

85.00 

7.65 

4.03 

Tarmlnatofs 

7e.2.2 

0.50 

85.00 

7.65 

4.03 

Tmnsfomer 

7e.3 

0.26 

89.25 

5.69 

460 

C.26 

C^^ec^c 

7e.3.1 

0.00 

N/A 

WA 

N/A 

Insulation 

7e.3.2 

om 

85.CKI 

7M 

4.03 

Windings 

7e.3.3 

om 

mm 

4.03 

Tank 

7e.3.4 

0.00 

N/A 

N/A 

N/A 

Power  Sowt^  Transit  S^t^ 

7e.4 

0.26 

92.^ 

3.83 

5.07 

C.27 

T^t  (Transfer  Switch) 

7e.4.1 

0.(K> 

N/A 

N/A 

N/A 

T^t  (Manual  Transfer  £^ce) 

7e.4.2 

1.M 

92.50 

3.83 

6.07 

Supporting  Structure 

6e 

mm 

2.07 

Ufting  Device  StriKfcire  (Sted) 

m 

0  60 

92.50 

1.66 

C64 

Displacement  /  D^ectoratlon 

7f.1.1 

0.17 

mm 

BM 

Andior  Bolts 

7fA2 

0.17 

mm 

3.83 

5.07 

Decks 

Tt.i.S 

0.17 

mm 

3.83 

5.07 

Dstortkm 

7f.1.4 

0.17 

mm 

3.83 

5,07 

CcMTc»lon 

7f.1.5 

0.17 

92.50 

3.83 

5,07 

Missing  or  Loose  Parts 

Tf.i.e 

0.17 

92.60 

3.83 

5.07 

Lifting  Omce  Strucbjre  (Conaete) 

7f2 

0.50 

mm 

3.83 

C.61 

Derived  from  a  Combination  of  Inspected  items 
Directly  Measured  by  Inspection 


Table  5.5;  Condition  Index  and  Reliability  Results  for  the  Gate  Sub-System  on  the  Great 
Falls  Spillway 


Standard 

Reliability 

Reference 

Item 

Number 

Importance 

Mean  Cl 

Deviation 

Index 

Table 

Level  7:  Components 

Gate#1 

,r: 

M.48 

1.25 

5.11 

Gate  Structure  and  Support 

0.90 

90.26 

1.17 

5.09 

Approach  and  Exit  Channel 

7g.1.l 

0.17 

92.50 

1.71 

5.25 

C.63 

Loss  of  Concrete  Apron 

7g.1.1.1 

0.20 

92.50 

3.83 

5.07 

Loss  of  Concrete  Pier/Base 

7g.1.1.2 

0.20 

92.50 

3.83 

5.07 

Scour  of  Foundation 

7g.1.1.3 

0.20 

92.50 

3.83 

5.07 

Upsti^am  Sedimentation 

7g.1.1.4 

0.20 

92.50 

3.83 

5.07 

Downstream  Blockage 

7g.1.1.5 

0.20 

92.50 

3.83 

5.07 

Embedded  Parts 

7g.1.2 

0.17 

80.30 

3.28 

4.20 

C.65 

Gate  Lifting  Effort 

7g.1.2.1 

0.20 

92.50 

3.83 

5.07 

Geometrical  Alignment  Roller 

7g.1.2.2 

0.20 

62.00 

11.22 

2.18 

Roller  Path  Corrosion 

7g.1.2.3 

0*20 

69.60 

7.40 

3.02 

Roller  Tooth  Wear 

7g.1.2.4 

0.20 

92.50 

3.83 

5.07 

Corrosion  Remainder 

7g.1.2.5 

0.20 

85.00 

7.65 

4.03 

Gate  Structure 

7g.1.3 

0.17 

91.25 

1.91 

5.14 

C.66 

Loading  History 

7g.1.3.1 

0.17 

92.50 

3.83 

5.07 

Cracks 

7g.1.3.2 

0.17 

92.50 

3.83 

5.07 

Distortion 

7g.1.3.3 

0.17 

92.50 

3.83 

5.07 

Skin  Plate  Corrosion 

7g.1.3.4 

0.17 

85.00 

7.65 

4.03 

Tension/Comp.  Corrosion 

7g.1.3.5 

0.17 

92.50 

3.83 

5.07 

Missing  or  Loose  Parts 

7g.1.3.6 

0.17 

92.50 

3.83 

5.07 

Closure  Structure  (Stop  Bull 

7g.1.4 

0.17 

92.50 

i:56 

5.25 

C.67 

Structural  Evaluation 

7g.1.4.1 

0.17 

92.50 

3.83 

5.07 

Cracks 

7g.1.4.2 

0.17 

92.50 

3.83 

5.07 

Distortion 

7g.1.4.3 

0.17 

92.50 

3.83 

5.07 

Skin  Plate  Corrosion 

7g.1.4.4 

0.17 

92.50 

3.83 

5.07 

Tension/Comp.  Corrosion 

7g.1.4.5 

0.17 

92.50 

3.83 

5.07 

Missing  or  Loose  Parts 

7g.1.4.6 

0.17 

92.50 

3.83 

5.07 

Bottom  and  Side  Seals 

7g.1.5 

0.17 

92.50 

3.83 

5.07 

C.68 

Ice  Prevention 

7g.1.e 

0.17 

92.50 

3.83 

5.07 

C.31 

Access  and  Control 

7g:2 

0.10 

92.50 

3.83 

5.07 

Remote  and  Onsite  Controls 

7g.2.1 

1.00 

92.50 

3.83 

5.07 

C.23 

Derived  from  a  Combination  of  Inspected  items 
Directly  Measured  by  Inspection 


Table  5.6:  Condition  Index  and  Reliability  Results  for  the  Hoist  Sub-System  on  the  Great 
Falls  Spillway 


Standard 

Reliability 

Reference 

Item 

Number 

Importance 

Mean  Cl 

Deviation 

Index 

Table 

Level  7:  Components 

Hoist  #1 

6c.1 

91.85 

0.95 

5.23 

Power  Supply  and  Controls 

Th.1 

0.50 

92.50 

1.61 

5.25 

Limit  Switches 

7h.l1 

0.25 

92.50 

3.83 

5.07 

C.30 

Motor  (ksntrol  Center 

7h.1.2 

0.25 

92.50 

2.21 

5.21 

C.^ 

Functional  Test 

7h.1.2.1 

0.33 

92.50 

3.83 

5.07 

Vmual  In^^ecBon 

76.1.2.2 

0.33 

m.m 

3.83 

5.07 

Cabinet  Heating 

7h.1.2.3 

0.33 

92.50 

3.83 

5.07 

DistebuSon  Panrt 

7h.1,3 

0.25 

2.71 

5,18 

C,32 

Functional  Test 

7h.1.3.1 

0.50 

92.50 

3.83  I 

5.07 

Visual  Inspedion 

7h.1.3.2 

0.M 

92m 

3.83 

5.07 

Cabinet  Heating 

7h.1.3.3 

0.00 

N/A 

N/A 

N/A 

Cam  Switches 

7h.1.4 

0.25 

92.50 

3.83 

5.07 

c.m 

Functional  Test 

7h.1.4.1 

1.00 

m.m 

3.83 

5.07 

Overheating  or  Arching 

7h.1.4.2 

0.00 

N/A 

N/A 

N/A 

For^  Transmission 

7h.2 

0.50 

1.00 

5,17 

Sfdit  Bu8h./Joumal  Bearit^ 

7h.2.1 

0.09 

3.83 

5.07 

C.41 

Rdating  Shaft 

7h.2.2 

0.09 

90.63 

2.53 

5.05 

C.42 

Corroston 

7h.2.2.1 

0.25 

92.50 

3.83 

5.07 

Warping  or  Misalign 

7h.2.2,2 

055 

3.83 

5.07 

Craddng 

^2.2.3 

0.25 

85.00 

7.65 

4.03 

Missing  bc^  or  asmp 

7h.2.24 

0.25 

mm 

3.83 

5.07 

Gear  Assembly 

7h.2.3 

0.09 

89.50 

2.54 

4.96 

C.43 

Noise,  vibration.  Jump 

7h5.3.1 

0.20 

85,00 

7.65 

4.03 

Toottiwear,  rented 

7h.2.3.2 

0.20 

92m 

3.83 

5.07 

Anchor 

7h.2.3.3 

0.20 

mm 

3.83 

5.07 

Bearing !  Bushir^  Wear 

7h,2.3.4 

0.^ 

85.00 

7.65 

4.03 

Lubricant 

7h.2.3.6 

0.20 

%.50 

3.83 

5,07 

Wheel,  axle  and  beatings 

7h.2.4 

0.(» 

3.83 

5.07 

Lifting  Connedors  (non-ded) 

7h.2.5 

0.09 

92.50 

3.83 

5.07 

C.46 

Lifting  Ckmn^ors  (ded) 

7h2£ 

0.(^ 

m.m 

3,83 

5.07 

C.45 

Drum  Sheaves  and  Rilleys 

7h.2.7 

0.09 

90.63 

2.53 

5.05 

C.49 

Variable  of  Meamiteable  Wear 

7h.2.7.1 

055 

92.50 

3.83 

5,07 

Corroston 

76.2.7.2 

0.25 

85.00 

7,66 

4.03 

Groove  Wear 

^.2.7.3 

0.25 

92.50 

3.83 

5.07 

Wire  tope  Clamp^Anchors 

!  76.2.7.4 

055 

3.83 

5.07 

Brake  (hoist) 

7h.2.8 

0.09 

92.50 

3.83 

5,07 

C.50 

Fan  Bmke 

76.2.9 

O.M 

3.83 

6.07 

Wire  Rope  &  Connedors 

7h.2.10 

0.09 

92.50 

1.91 

5.23 

C.53 

Kinidng 

76.2.10.1 

0,25 

m.m 

3.83 

5.07 

Corrosion 

m2.10.2 

0.25 

92.50 

3.83 

5.07 

Outer  Wire  Wear/Breakage 

76.2.10.3 

0.25 

92.50 

3.83 

5.07 

Tension 

76.2.10.4 

055 

m.m 

3.83 

5.07 

LHtir^  Motor  (dedtic) 

76.2.11 

0  09 

85.00 

3,12 

4.57 

C.34 

In^lators 

765.11.1 

0.17 

85.tX) 

7.65 

4.03 

Apparent  Temperature 

76.2.115 

0.17 

85.(K) 

7.65 

4.03 

Ov^toading 

m2.11.3 

0.17 

7.65 

4.03 

Impaired  Ventilation 

76.2.11.4 

0.17 

85.00 

7.65 

4.03 

Bearings  and  Bushings 

76.2.11.5 

0,17 

85.CK) 

7.65 

4,03 

Noise  and  \6brations 

m2.11.6 

0.17 

85.00 

7.65 

4.03 

Table  5.7:  Condition  Index  and  Reliability  Results  for  the  Higher  Level  Sub-Systems, 
Systems  and  Spillway  Structure  on  the  Great  Falls  Spillway 


Standard 

Reliability 

Supporting 

Item 

Number 

Importance 

Mean  Cl 

Deviation 

Index 

Items 

Level  2:  Dam  Safety  Functions 

Overtopping  Design  Flood 

2a 

84.02 

OM 

4.61576 

4a,  4b 

Level  3:  Type  of  Gate 

Level  4:  Operational  Sys.  and  Equip. 

Operations 

4a 

0.3 

70.26 

2.45 

3.48447 

5a,  5^,  5c 

Equipment 

4b 

0.7 

89.92 

0.73 

5.08116 

5d,  5e 

Level  5:  Systems 

Gathering  Information 

5a 

76.72 

2,01 

4.00574 

sep.  sheet 

Decision  Process 

5b 

62.10 

2.75826 

sep.  sheet 

Access  and  Operation 

5c 

92.50 

5.25897 

sep.  sheet 

Electrical 

5d 

87.26 

4.83613 

6a,  6b 

Hoist /Gate  System 

5e 

■1 

91.69 

037 

5.22615 

6c,  6d,  6e 

Level  6:  Sub-Systems 

Power  Supply 

6a 

0.40 

86.25 

4.74019 

sep.  sheet 

Cables  and  Controls 

6b 

'  0.6 

87.94 

4.83719 

sep.  sheet 

Gate-Hoist  Sub-System 

6cd 

91.65 

0.38 

5.22275 

6cd.1-4 

Hoist  1 /Gate  1 

ecd.1 

0.26 

91.58 

0.80 

5.20956 

6c.1,6d.1 

Hoist  2 /Gate  2 

6cd.2 

0.25 

91.67 

0.73 

5.21812 

6c.2.6d.2 

Holst  3  /  Gate  3 

6cd.3 

0.25 

91.67 

0.73 

5.22 

6c.3, 6d.3 

Hoist  4 /Gate  4 

6cd.4 

0.25 

91.67 

0.73 

5.22 

6C.4, 6d.4 

Holst  1 

6c.1 

0.80 

91.85 

0.95 

5.23 

sep.  sheet 

Hoist2 

6c.2 

0.80 

92.19 

0i86 

5.26 

sep.  sheet 

Hoists 

60.3 

0.80 

9219 

005 

5.26 

sep.  sheet 

Hoist  4 

6c.4 

0.80 

92.19 

0.85 

5.26 

sep.  ^eet 

Gatel 

6d.1 

0.20 

90*48 

1*25 

5.11 

sep.  sheet 

'  Gate2  :  ■ 

6d.2 

0.20 

89.57 

1.35 

5.03 

sep.  sheet 

Gates 

6d.3 

89.57 

1,35 

5.03 

sep.  sheet 

.  Gate  4  ;  :  i:,  ■ 

6d.4 

0.20 

89.57 

1.35 

5.03 

sep.  sheet 

Supporfing  StruotufB 

6e 

0.o3 

92.50 

2.07 

5.22 

sep.  sheet 

Derived  from  a  Combination  of  Inspected  Items 
Directly  Measured  by  Inspection 


Table  5.8;  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components  on  the  Gathering  Information,  Decision  Process,  and  Access  and 
Operations  Systems  of  the  Great  Falls  Spillway 


System  pf 

System  pf 

System  pf 

ftem 

Component  pf 

Current 

Statistical 

Perfect 

L0^1 7:  Components 

Propc^al 

Independent 

Ck^n^alion 

Gathering  Infomatfon 

3.09264E-05 

0.28686493 

0,097689389 

Riv^  Flow  Measurement 

9.60546E-06 

0.014715658 

0.014715263 

Water  Lev^  Indicator 

2.00486E-^7 

Data  Acquisition  D^ce 

2.00486E-07  . 

i 

Data  Tmnsmfesfon 

0.014715263 

Resenrolr  Level  indicator 

9.60546E-06 

0.0147156581 

0.014715263 

Water  L^el  Indicator 

2.0048eE*^7 

Data  Acquisition  Devito 

0.014715263 

Data  Transmission 

Predpitatlon  S  Temp.  Gauge 

2,00486E-07 

4.78599E-05 

0.OT7689751 

0,097689389 

Predp  &  Temp  Gauges 

0.097689389 

Data  Acquisition  Dewce 

2.004ME-07 

Data  Transmission 

2.00486E-07 

SrK^w  Measuring  Mck!^ 

0.097689389 

Row  PredidtiCMi  Mode! 

0.TO7689389 

Weattier  Fis^i^lng 

and  Debrte  Maiag^ent 

4.32368E^ 

9.2^36E-0a 

6.01459E-07 

2.004a6E^7 

Monitoring 

2.00486E-07 

Manag^ent 

2.00486E-07 

Control  Equipment 

Gate  Position  Indicator 

2,00486E-07 

9.24035E-08 

6.01459E-07 

2.00486E-07 

Position  Indicator 

2.0€M86E^7 

Data  Acquisition  Device 

2.004^E-07 

Data  Transmission 

2.004^E^7 

TOrd-Party  Flow  Data 

2.004^E-07 

Decision  fhroc^s 

0.002905596 

0.221261349 

0.097689389 

I^ta  PftK^slng 

2.00486E-07 

^alysis 

0.097689389 

DedslonPmc^s 

0.097689389 

Riblic  Rotection  Warning  System 
Opemtlon  Procedures 

0.014715263 

0.006890764 

0.(^9213987 

0.014715263 

Standard  Operating  Procedu^ 

0.014715263 

AutOfKjmous  Operating  Proc. 

0.01471^63 

/y»:ess  and  Operattons 

7.25771  E-08 

1.60389E^ 

2.00486E-07 

Avail,  and  Mobilteatlon  {Load  Rsjecticm) 

1.13071E-07 

4.M973E-07 

2.00486E-07 

Availabllty 

2.00488E-07 

Mobllizatic^ 

Avail  and  Mobilization  {Load  Reiection) 

2.00486E-«7 

1.13071E-07 

4.00973E-07 

2.00486E-07 

Availabllty 

2.00486E-07 

Mc^llization 

2.00486E-07 

Qualification  /  Tralnir^  erf  C^ratew 

Uxal  Acems 

2,00486E-07 

1.13071E-07 

4.00973E-07 

2.00486E-07 

Ped^rian  heems 

2.00486E-07 

Ke^  and  Locte 

2.004ME-07 

Lighting  System 

2.00486E-07 

i 

Table  5.9:  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components  on  the  Power  Supply,  Cables  and  Controls,  and  Supporting 
Structure  Sub-Systems  on  the  Great  Falls  Spillway 


Item 

Component  pf 

System  pf 
Current 
Proposal 

System  pf 
Statistical 
Independence 

System  pf 
Perfect 
Correlation 

Level  7:  Components 

Power  Supply 

Local  or  Emergency  Generators 
Frequency  and  Voltage 

Engine  Temperature  /  Oil  Pressure 
Starting  Sequence 

Noise  and  N^bratiion 

Functional  Test 

Fuel 

Batteries 

Battery  Charger 

Altemator 

Lubricatton 

Cooling  System 

Intake  and  Exhaust  System 

2.74724E-05 

2.74724E-05 

2.74724E-05 

2.74724E-05 

2.00486E-P7 

2.00486E-07 

2.74724E-05 

2.74724E-05 

2.74724E-05 

2.74724E-05 

2.74724E-05 

2.74724E-^5 

1.06889E-06 

1.06889E-06 

0.000275091 

0.000276091 

2.74724E-05 

2.74724E-05 

Cables  and  Controls 

6.59336E-07 

0.000165024 

2.74724E-05 

Underground  and  Encased  Cables 

7.44806E-06 

5.49441  E-05 

2.74724E-05 

Insulation 

2.74724E-05 

Terminators 

2.74724E-05 

Power  Feeder  Gabies 

7.44806E-06 

5.49441  E-05 

2.74724E-05 

Insulatbn 

2.74724E-05 

Terminators 

2.74724E-05 

transform^ 

2.11036E-06 

5.49441  E-05 

2.74724E-05 

Dielectric 

N/A 

Insulation 

2.74724E-05 

Windings 

2.74724E-05 

Tank 

N/A 

Power  Source  Transfer  System  1 

2,00486E-07 

2.00486E-07 

2.00486E-07 

Test  (T  ransfer  Switch) 

N/A 

T^t  (Manual  Transfer  Device) 

2.00486E-07 

Supporting  Structure 

8.77766E-08 

1.60389E-06 

2.00486E-07 

Lifting  Device  Structure  (Steel) 

7.50719E-08 

1.4034E-06 

2.00486E-07 

Displacement  /  Deterioration 

2.00486E-07 

Anchor  Bolts 

2.00486E-07 

Cracks 

2.00486E-07 

Distortion 

2.00486E-07 

Corrosion 

2.00486E-07 

Missing  or  Loose  Parts 

2,00486E-07 

Lifting  Device  Structure  (Concrete) 

2.00486E-07 

Table  5.10:  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components  on  the  Gate  Sub-Systems  on  the  Great  Falls  Spillway 


System  pf 

System  pf 

System  pf 

Item 

Component  pf 

Current 

Statistical 

Perfect 

L^val  7:  Component 

ProtKssal 

Independence 

Correlation 

Gate#1 

1.61924E-07 

0.016027391 

0.014715263 

Gate  S^cture  and  Support 

1.74TO9E^7 

'  0.01M27194 

0.014715263 

Approach  and  Exit  Channel 

7.82941  E-08 

1.00243E-06 

2.00486E*^7 

Loss  of  C^o’ete  Apron 

2.00486E-07  | 

Lc^s  of  Concrete  Pier/Base 

2.00486E-07  ! 

Scour  of  Foundation 

2.00486E-07 

Upstream  S^im^rtation 

2.0048eE-07 

Downstream  Blockage 

Embedded  Parts 

2.00486E-07 

1.34074E-05 

0,01699661 

0.014715263 

Gate  Lifting  Effort 

2.00486E-07 

Geometrical  Alignment  Roller 

0.014715263 

Roller  Path  Qxrosion 

0.0012726« 

(%riler  Toottr  Wear 

2.00486E-07 

Cmcmtm  Remainder 

Gate  Sftucture 

2.74724E^5 

1.40177E-07 

2.84748E-05 

2.74724E-05 

Loading  History 

2.00486E^7 

Docks 

2.C»486E4)7 

Distortion 

2.00^6E^7 

Skin  Plate  Gcwrosion 

2.74724E4)5 

iBtmtmfOtmp.  Ck^mmon 

2.00486E-07 

Misslr>g  or  Loc^e  Parfe 

Ctosure  Structure  (Stop  Lt^,  Bulkheads) 

2.00486E-07 

7.50719E-08 

1.20292E-06 

2.00486E-07 

Strudural  Ev^uation 

2.00^E-07 

Cracks 

2.0CM6E-07 

EXstc^on 

2.TO486E-07 

Skin  Plate  Ckirroslon 

2.00486E^7 

Taftston/Comp,  Dsrroslon 

2.00486E-07 

Missing  or  LtK^B  Par^ 

2.00486E-07 

Bottmi  ^d  Side  Seals 

2.(H)486E457 

l£«  Preventton 

2.00486E-07 

Accms  and  Control 

2.0CM86E-07 

2.00486E«^7 

2.CW86E-^7 

R«nrte  and  Onsite  Controls 

2.00486E-07 

Table  5.1 1 :  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components  on  the  Hoist  Sub-Systems  on  the  Great  Falls  Spillway 


System  pf 

System  pf 

System  pf 

Item 

Component  pf 

Current 

Statistical 

Perfect 

Level  7:  Components 

Proposal 

Independence 

Correlation 

Hoist  #1 

8.6391 4E-08 

0.0005002 

2.74724E-05 

Power  Supply  and  Controls 

7.60663E-08 

1.4034E-06 

2.00486E-07 

Limit  Switches 

2.00486E-07 

Motor  CSontrol  Center 

9.24035E-08 

6.01459E-07 

2.00486E-07 

Functional  Test 

2.00486E-07 

Visual  Inspection 

2.00486E-07 

Cabinet  Heating 

2.00486E-07 

Distribution  Panel 

1.1 3071 E-07 

4.00973E-07 

2.00486E-07 

Functional  Test 

2.00486E-07 

Visual  Inspection 

2.00486E-07 

Cabinet  Heating 

N/A 

Cam  Switches 

2.00486E-07 

2.00486E-07 

2.00486E-07 

Functional  Test 

2.00486E-07 

Overheating  or  Arching 

N/A 

Force  Transmission 

1. 14401 E-07 

0.000498797 

2.74724E*^5 

Split  Bush./Journal  Bearing 

2.00486E-07 

Rotating  Shaft 

2.25238E-07 

8.361 79E-05 

2.74724E-05 

Corrosion 

2.00486E-07 

Warping  or  Misalign 

2.00486E-07 

Cracking 

2.74724E-05 

Missing  bolts  or  comp 

2.00486E-07 

Gear  Assembly 

3.5381 3E-07 

5.55455E-05 

2.74724E-05 

Noise,  vibration,  jump 

2.74724E-05 

Toothwear,  contact 

2.00486E-07 

Anchor 

2.00486E-07 

Bearing  /  Bushing  Wear 

2.74724E-05 

Lubricant 

2.00486E-07 

Wheel,  axle  and  bearings 

2,00486E-07 

Lifting  Connectors  (non-ded) 

2.00486E-07 

Lifting  Connectors  (ded) 

2.00486E-07 

Drum  Sheaves  and  Pulleys 

2.25238E-07 

2.80739E-05 

2.74724E-05 

Variable  of  Measureable  Wear 

2.00486E-07 

Corrosion 

2.74724E-05 

Groove  Wear 

2.00486E-07 

Wire  rope  Clamps/Anchors 

2.00486E-07 

Brake  (hoist) 

2.00486E-07 

Fan  Brake 

2.00486E-07 

Wire  Rope  &  Connectors 

8.33506E-08 

0.000165625 

2,00486E-07 

Kinking 

2,00486E-07 

Corrosion 

2.00486E-07 

Outer  Wire  Wear/Breakage 

2.00486E-07 

Tension 

2.00486E-07 

Lifting  ^totor  (electric) 

2.45357E-06 

0.000164823 

2.74724E-05 

Insulators 

2.74724E-05 

Apparent  Temperature 

2,74724E-05 

Overloading 

2.74724E-05 

Impaired  Ventilation 

2.74724E-05 

Bearings  and  Bushings 

2.74724E-05 

Noise  and  Vlbratfons 

2.74724E-^5 

Table  5.12:  Comparison  of  the  Currently  Proposed  Cl  System  Probability  of  Failure  and 
the  Traditional  System  Reliability  Approach  for  both  Independent  and  Perfectly 
Correlated  Components  on  the  Higher  Level  Sub-Systems,  Systems  and  Spillway 
Structure  on  the  Great  Falls  Spillway 

System  pf  System  pf  System  pf 

Current  Statistical  Perfect 

Item _ Proposal _ Independence _ Correlation 

Level  2:  Dam  Safety  Functions 

Overtopping  Design  Flood  1,96034E-06  0.444893242  0.097689389 


Level  3:  Type  of  Gate 


L«vel  4:  Operational  Sys.  and  Equip. 
Operations 

Equipment 

0.000246599 

1,87888E-07 

0.444647917 

0.000441747 

0.097689389 

0.014715263 

Level  6:  Systems 

Gathering  Information 

3.09264E-05 

0.28686493 

0.014715263 

Decision  Process 

0.002M5596 

0.221251349 

0.097689389 

Access  and  Operation 

7.25771  E-08 

1.60389E-06 

2.00486E-07 

Electrical 

6.6284E-07 

0.00044007 

2.74724E-i)5 

Holst  /  Gate  System 

8.67067E-08 

1.67836E-06 

0.014715263 

L^vel  6:  Subsystems 

Power  Supply 

1.06889E-06 

0.000275091 

2.74724E-05 

Cables  ar^  Controls 

6.59^6E-07 

0.000165024 

2.74724E-05 

Gate-Hoist  Sub-System 

8.83125E-08 

7.44724E-08 

0.014715263 

Holst  1  /  Gate  1 

9,48291 E-08 

0.016519574 

0.014715263 

Hoist  2 /Gate  2 

9.05476E-08 

0.016519574 

0.014715263 

Hoist  3  /  Gate  3 

9.05476E-08 

0.016519574 

0.014715263 

Holst4/6ate4 

9.05476E-08 

0.016519574 

0.014715263 

Holst  1 

8.e3914E-08 

0.0005002 

2,74724E4)5 

Hol8t2 

7.36896E-08 

0.0005002 

2.74724E-05 

Hoists 

7.36896E-08 

0.0005002 

2.74724E^)5 

Holst  4 

7.36896E-08 

0.0005002 

Gate  1 

1.6ia24E-07 

0.016027391 

0.014715263 

Gate  2 

2.40621  E-07 

0.016027391 

0.014715263 

Gate  3 

2.40621  E-07 

0.016027391 

0.014715263 

Gate  4 

2.40621E-07 

0.016027391 

0.014715263 

SuppoUng  Struchire 

8.77766E-08 

1,60389E-06 

2.00486E-07 

Figure  5.1 :  Photograph  of  the  Great  Falls  Dam  on  the  Winnepeg  River  (Manitoba  Hydro 
2004) 


Figure  5.3:  The  Hoist/Gate  Sub-System  Modeled  as  a  Parallel-Series  System  of  the  Four  Separate  Gates  Which  Each  Have  a 

Dedicated  Hoist 
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igure  5.4:  The  Components  and  Sub-Components  of  the  Gathering  Information  System  on  the  Great  Falls  Dam 


Data 

Process. 


Figure  5.5:  The  Components  and  Sub-Components  of  the  Decision  Process  and  the  Access  and  Operations  Systems  on  the  Great  Falls 


Figure  5.6:  The  Components  and  Sub-Components  of  the  Power  Supply,  Cables  and  Controls,  and  Support  Structure  Systems  on  the 
Great  Falls  Dam 
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Figure  5.7:  The  Components  and  Sub-Components  of  the  Gate  System  on  the  Great  Falls  Dam 
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Figure  5.8:  The  Components  and  Sub-Components  of  the  Hoist  System  on  the  Great  Falls  Dam 


Figure  5.9:  Additional  Components  and  Sub-Components  of  the  Hoist  S5^tem  on  the  Great  Falls  Dam 


Chapter  6:  Incorporating  Structural  Vulnerability 


6.1  Background 

Security  of  the  Nation’s  infrastructure  has  always  been  an  important  concern,  but 
never  more  so  since  the  terrorist  attacks  of  September  1 1, 2001.  Upgrading  the  security 
of  various  structures  has  become  a  major  source  of  maintenance  and  rehabilitation 
funding.  The  American  Waterworks  Association  (AWWA  2003)  estimates  that  it  will 
require  $500  million  for  vulnerability  assessments  and  $1.6  billion  for  security  protection 
for  the  nation’s  utilities.  The  Bureau  of  Reclamation  spent  $33  million  in  2002  and  $53 
million  in  2003  on  vulnerability  assessment  and  security  projects  on  its  high  priority 
dams.  As  such,  the  vulnerability  of  a  structure  to  terrorist  attack  could  be  a  relevant 
consideration  in  the  condition  assessment  of  a  structure.  The  proposed  condition  index 
methodology  is  flexible  enough  to  incorporate  any  relevant  variable.  The  purpose  of  this 
chapter  is  to  illustrate  how  structural  vulnerability  can  be  incorporated  into  the 
development  of  a  structure’s  condition  index. 

6.2  Incorporating  Security  into  the  Condition  Index 

Using  the  hypothetical  structure  from  Fig.  4.4,  Fig.  6.1  adds  a  Security  system  to 
the  structure  and  provides  an  importance  value  relative  to  the  rest  of  the  structure.  The 
importance  values  of  the  rest  of  the  structure  must  be  reduced  to  allow  the  sum  of 
importance  factors  at  a  given  level  to  equal  1.0.  Assume  the  Security  system  was  given  a 
rating  where  the  mean  Cl  was  70  and  the  standard  deviation  was  7.4.  Eq.  4. 10  revealed 
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that  the  original  structure’s  mean  Cl  value  was  89.5  with  a  standard  deviation  of  3.16  at 
year  0.  Incorporating  a  Security  system  into  the  structure  with  the  score  indicated,  the 
structural  system  Cl  would  become: 

=  (0. 16)(85)  +  (0.48)(92.5)  +  (0.16)(85)  +  (0.2)(70)  =  85.6  (6.1) 

=  ^/(0.16)^(7.65)^  +  (0.48)^  (3.83)^  +(0.16)^  (7.65)^  +(0.2)^(7.4)^  =  2.93 

As  a  result  of  the  Security  rating,  the  overall  Structure  Cl  was  slightly  less  and  would 
make  the  structure  a  slightly  more  likely  candidate  for  maintenance  upgrade  funding. 
The  magnitude  of  the  effect  is  determined  by  the  importance  factor  given  to  security. 

The  security  rating  is  deliberately  kq>t  separate  from  the  rest  of  the  structure  to 
give  the  analyst  the  option  of  easily  including  or  excluding  it  from  the  analysis.  As  widi 
the  Great  Fall  Spillway,  it  would  have  been  easy  to  separate  the  Equipment  system  from 
the  Operations  system  if  the  analyst  prefered  to  only  insider  the  Equipment.  The 
Security  system  rating  could  be  treated  as  a  component  where  a  simplistic  and  subjective 
high,  medium  or  low  rating  could  form  a  component  condition  table.  Conversely,  it 
could  be  a  complex  and  comprehensive  system  consisting  of  many  components  and  sub¬ 
components.  Fig.  6.2  suggests  a  sample  hierarchical  structure  for  a  security  system. 

The  S^mrity  system  is  divided  into  sub-systems  reflecting  the  Criticality, 
Redundancy,  Vulnerability  and  Response  Planning  aspects  of  the  structure.  The 
Criticality  accounts  for  the  effects  on  the  immunity  and  economy  if  the  structure  is 
immobilized.  It  could  be  me^ured  in  terms  of  dollar  consequaice  of  destruction, 
anticipat«l  lives  lost,  dollar  value  of  commerce  lost,  or  size  of  population  affect«J,  The 


58 


Redundancy  sub-system  assesses  the  ability  of  a  single  fire,  bomb,  or  power  loss  to 
destroy  or  shut  down  the  entire  structure.  Alternative  power  sources,  multiple  lift  gates, 
or  redundant  structural  members  might  be  critical  considerations.  Response  Planning 
reflects  the  ability  of  the  community  and  people  on  site  to  respond  to  an  attack  and  is 
further  sub-divided  into  internal  and  external  capabilities.  Internal  Planning  capabilities 
measure  the  capability  of  the  site  personnel  to  respond  and  will  be  assessed  using  criteria 
such  as  response  standard  operating  procedures,  training  programs,  internal  drills  and 
rehearsals,  redundant  and  reliable  communication  equipment,  early  warning  procedures, 
detection  capabilities,  alarm  systems,  and  reporting  procedures.  The  External  Planning 
assesses  the  response  capability  of  the  outside  community  to  include  law  enforcement, 
fire  fighters,  medical  teams,  and  local,  state,  and  federal  response  teams.  Access  and 
distance  to  the  site  are  also  included. 

« 

Structure  Vulnerability  refers  to  the  ease  with  which  the  site  can  be  attacked.  Fig. 
6.2  further  classifies  Vulnerability  in  terms  of  air,  water,  land,  and  cyberspace.  Attack 
from  the  air  might  include  chemical  or  biological  attack,  dropping  a  bomb,  or  flying  an 
airplane  into  the  structure.  The  Vulnerability  assessment  would  be  a  function  of  local  air 
defense,  air  traffic  patterns,  and  ability  of  the  structure  to  withstand  a  hit.  For  dams,  a 
water  attack  might  include  assault  by  watercraft  or  simply  the  ability  of  a  terrorist  to  float 
an  explosive  device  downstream.  Vulnerability  would  be  assessed  by  protective 
measures  such  as  boat  patrols  that  could  observe  and  intercept  attacks,  observation 
capability,  and  ability  of  the  structure  to  withstand  attack.  Cyberspace  Vulnerability 
would  depend  on  the  structure’s  degree  of  reliance  on  computers  and  computer  systems. 
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Vulnerability  might  be  determined  by  the  security  of  the  computer  systems,  redundancy, 
access  to  terminals,  and  the  use  of  firewalls,  intrusion  detection  devices,  and  password 
protection. 

The  most  common  threat  is  probably  coming  by  land.  The  Land  sub-system  is 
divided  into  the  Power  Supply,  Communications  and  Site  Security  components.  The  Site 
Security  component  consists  of  Access,  Observation  and  Presence  sub-components. 
Access  measures  the  ability  to  control  who  is  allowed  on  the  site.  It  mi^t  include  a 
perimeter  fence;  keys  or  badges  to  control  acc^s;  locks  on  doore  and  gates;  procedures 
for  contractors,  deliveries  or  tour  groups;  and  harden^  doors  and  windows.  Obsrawation 
incorporates  the  ability  to  see  and  detect  any  terrorist  activity.  TTie  existence  of  lighting 
systOTis,  video  cameras,  and  roving  patrols  would  enhance  situation  awareness.  Along 
the  same  line,  chemical  alarms,  radar  systems,  and  bomb-sniffing  dogs  would  detect 
potential  threats.  The  remote  nature  of  a  site  might  affect  observation  by  the  general 
population.  Fig.  6.3  shows  photographs  of  some  security  devices  currently  in  place  on 
locks  and  dams. 

Finally,  Presence  measure  the  degree  to  which  site  peisoimel  are  available  to 
protect  the  site.  The  lowest  level  of  the  hierarchy  contains  an  inspectable  item  with  a 
component  condition  table  where  the  inspector  must  attempt  to  match  the  actual  situation 
to  the  best  description  on  the  table.  Table  6.1  suggests  a  sample  Component  Condition 
Table  for  the  Site  Presence  sub-component  of  the  Site  Security  component.  In  this 
example,  the  Cl  score  for  Presence  is  a  function  of  hours  of  operation,  guards  on  site,  and 
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the  hiring  of  a  Security  Manager.  The  Security  system  Cl  score  is  a  function  of  the 
inspection  Cl  scores  and  importance  factors  of  all  the  sub-levels  that  comprise  the  system 
using  the  same  approach  outlined  in  Chapter  3. 

The  Security  system  presented  in  this  report  is  just  one  example  of  the  many 
possibilities.  The  Corps  of  Engineers  has  invested  in  the  Risk  Assessment  Methodology 
for  Dams  (RAM-D)  whose  purpose  is  to  identify  and  coimter  the  potential  threat  to  die 
nation’s  75,000  dams  (Matalucci,  2002).  The  results  obtained  from  RAM-D  analyses 
could  be  incorporated  into  the  Cl  ratings.  Whatever  method  is  used  to  evaluate  the 
security  and  vulnerability  status  of  a  structure,  it  appears  that  it  can  easily  be  incorporated 
info  a  condition  index  assessment  of  a  structure  if  the  manager  feels  it  is  relevant. 
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Table  6.1:  A  Sample  Component  Condition  Table  for  the  Site  Presence  Sub-c»mponent 

of  the  Site  Security  Component  of  the  Security  System  on  the  Hypothetical  Structure  in 

Figures  6,1  and  6.2 


Site  Presence 


Level  1 : 

structure 


Level  2; 

Systems 


Level  3: 

Sub-systems 


Figure  6.1 ;  Structural  Hierarchy  of  the  Hypothetical  Structure  From  Figure  4.4  Where 
Security  System  is  Included  in  the  Condition  Index  Analysis 
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Figure  6.3:  Photographs  of  Security  Measures  Taken  on  a  Lock  and  Dam  Structure  to  Include 
Coded  Locks,  Intercom  System,  Alarm  Systems,  Closed  Circuit  Cameras,  Lifting  Systmis,  and 
an  Observation  Tower  (PWos  taken  by  the  Author) 


Chapter  7:  Conclusions  and  Recommendations 


7.1  Conclusions 

This  report  has  introduced  a  probabilistic  approach  for  condition  index  assessment 
of  structures  that  will  allow  a  type  of  risk-based  analysis  based  on  periodic  visual 
inspection  results.  The  report  provided  background  information  and  an  explained  why 
the  issue  was  important.  The  current  methods  for  deterministic  condition  index 
assessment  and  reliability  analyses  of  both  civil  and  mechanical/electrical  structures  were 
discussed.  After  covering  the  challenges  associated  with  applying  risk-based  methods  to 
condition  index  data,  a  proposed  methodology  was  introduced  using  a  simple 
hypothetical  series-parallel  structure  as  an  example.  Key  assumptions  were  introduced 
that  covered  the  definition  of  failure,  the  probabilistic  parameters  of  the  condition  states, 
and  the  linear  transition  throu^  condition  states.  It  was  assumed  that  all  components 
were  statistically  independent,  normally  distributed  random  variables  and  that  any 
structure  can  be  described  as  a  hierarchy  of  systems,  sub-systems  and  components. 

Higher  level  Cl  values  were  obtained  from  component  inspection  results  and  the  relative 
importance  of  components  to  the  overall  structure.  The  reliability  index  and  probability 
of  failure  were  computed  at  various  points  in  time,  along  with  a  cost-benefit  analysis 
using  the  hazard  fimction.  Examples  showed  that  the  initial  assumptions  can  be  updated 
over  time  using  as  actual  inspection  data  becomes  available. 

The  probabilistic  approach  was  applied  to  spillways  on  dams  using  Chouinard 
et.al.  (2003)  as  the  source  for  the  structural  hierarchy,  importance  factors,  and  component 
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condition  tables.  After  covering  how  spillways  work,  how  a  traditional  reliability 
analysis  is  done,  and  how  the  deterministic  Cl  is  performed,  the  proposed  approach  was 
applied  to  the  CSreat  Falls  Spillway  using  the  actual  inspection  data.  The  differences 
between  treating  the  structural  system  as  a  composite  or  weighted  average  of  its 
components  versus  the  traditional  system  reliability  analysis  of  series  and  parallel 
systems  was  discussed  and  illustrated. 

Finally,  security  and  vulnerability  issues  were  incorporate!  into  the  Cl  analysis.  The  Cl 
approach  is  flexible  enough  to  accommodate  any  relevant  variahles,  even  if  they  are 
difficult  to  quantify.  A  sample  Security  systen  was  ^ded  to  the  previous  hypothetical 
structure  to  illustrate  how  terrorism  issues  can  be  included.  The  approach  is  based  on  Cl 
data,  is  probabilistic  in  nature,  and  allows  a  risk-based  approach  to  overall  structural 
condition.  The  proposed  methodology  has  certain  strengths  and  limitations  that  bear 
mention. 

7.1.1  Strengths 

The  benefits  of  the  ^proach  described  in  this  report  include: 

•  Based  on  the  assumptions  made,  a  risk-based  analysis  using  the  well  established 
methods  of  a  reliability  index,  probability  of  failme,  hazard  function,  and  cost- 
benefit  analysis  is  possible. 

•  The  methodology  is  based  on  the  detaministic  Cl  methods  already  published. 
This  means  any  inspection  data  that  already  exists  using  such  methods  can  be 
used  without  modification  with  the  techniques  describe  in  this  report. 
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•  A  structure  is  described  in  strict  hierarchical  form.  The  analysis  is  easily  broken 
down  by  component  and  portions  of  the  structural  system  can  easily  be  excluded 
or  included  based  on  the  desire  of  the  analyst.  All  levels  of  the  hierarchy  are 
visible  making  it  easier  to  identify  which  components  most  affect  a  system  rating 
and  to  evaluate  alternatives  of  replacing  a  component  versus  replacing  an  entire 
structure.  This  study  used  the  hierarchy  to  a  fuller  degree  that  Chouinard  et.al. 
(2003)  by  including  importance  factors  at  the  component  and  sub-component 
level. 

•  The  inspector  is  only  required  to  choose  the  appropriate  condition  state  for  a 
component  based  on  the  component  condition  tables.  The  actual  Cl  mean  value  is 
determine  by  how  long  the  component  has  been  in  that  condition  state.  Chouinard 
et.al.  (2003)  required  the  inspector  to  produce  an  actual  Cl  value  which  becomes 
highly  subjective  and  will  vary  greatly  between  inspectors,  especially  if  the 
condition  state  has  a  large  range  of  values.  The  proposed  method  will  provide 
greater  consistency  between  inspectors. 

•  Based  on  the  assumed  c^ability  of  the  inspector,  the  uncertainty  of  the  inspection 
reading  is  quantified.  In  a  deterministic  approach,  a  Cl  rating  is  given  the  same 
CTedibility  if  the  range  is  85-100  or  25-100.  In  the  probabilistic  approach,  the 
uncertainty  is  quantified  by  the  standard  deviation. 

•  The  linear  transition  of  a  component  through  a  condition  state  accounts  for  the 
effects  of  aging.  The  mean  value  of  the  Cl  gradually  transitions  fi-om  the  middle 
of  the  condition  state  to  the  lowest  value  in  the  condition  state  while  the  standard 
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deviation  remains  the  same.  The  component  that  has  been  in  a  given  condition 
state  longer  will  be  more  likely  to  receive  the  maintenance  funding, 

•  The  assumptions  of  components  that  are  statistically  independent  and  normally 
distributed  make  the  numerical  computations  quite  simple.  The  methodology  is 
only  slightly  more  complex  than  the  deterministic  approach  and  can  easily  be 
done  on  a  spreadsheet  as  was  demonstrated  in  the  example, 

•  The  methodology  can  be  applied  to  virtually  any  structure. 

•  Any  relevant  variable  can  be  included  in  the  anal^is,  if  one  can  effectively 
estimate  its  relative  importance  to  the  rest  of  the  structure.  Evai  variables  that  are 
difficult  to  quantify  numerically  can  be  used, 

•  Even  if  the  initial  assumptions  are  wrong,  the  data  that  is  needed  to  correct  and 
update  them  is  the  exact  data  that  is  being  inspected.  If  the  inspections  are 
periodic  and  relatively  frequent,  there  will  be  sufficirait  time  to  incorporate  the 
actual  results  and  revise  the  life-cycle  maintenance  projections  for  the  structure. 

•  The  structural  s^tem  Cl  ratings  provide  an  effective  means  of  comparing  the 
relative  conditions  of  structures  that  are  experiencing  very  different  distresses.  It 
is  also  an  excellent  means  to  communicate  the  condition  of  the  infi^tructure  in  a 
standardized  way  for  purposes  of  funding  and  public  safety. 

In  sum,  this  approach  offers  everything  that  the  deterministic  approach  offers  and 
produces  additional  benefits.  Since  there  is  no  additional  burden  on  the  inspector,  there  is 
no  down  side  to  replacing  the  deterministic  procedure  with  this  methodology,  despite  the 
fact  that  it  has  some  limitations. 

7.1.2  Limitations 
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While  there  are  benefits  to  this  methodology,  there  are  also  some  rather  severe  limitations 
that  need  to  be  considered  and  may  merit  further  study. 

•  This  is  a  probabilistic  methodology  based  on  no  real  data.  The  definition  of 
failure  and  the  capabilities  of  the  inspectors  are  bofii  just  intelligent  guesses.  Real 
data  will  only  come  over  time  based  on  actual  performance.  Because  there  are 
not  that  many  locks  and  dams  of  a  similar  type,  a  statistically  significant  data  base 
may  never  be  available.  The  hydropower  studies  by  Ayyub  et.al  (1 996)  and 
Mlaker  (1994)  suffered  from  a  lack  of  data. 

•  The  assumptions  of  statistical  significance  and  normal  distribution  may  not  be 
correct.  Large  portions  of  distributions  for  condition  states  will  extend  outside  the 
0-100  range  as  shown  for  CSl  and  CS4  in  Fig.  4.5.  Given  the  inhwent  limits  to 
the  accuracy  of  this  methodology,  this  will  not  have  a  serious  effect  on  the  results. 
The  largest  errors  will  apply  to  those  extreme  condition  states  where  the 
component  is  clearly  safe  or  clearly  failed.  The  more  critical  issue  is  that  with 
independent  components,  the  standard  deviation  of  the  Cl  becomes  progressively 
smaller  at  successively  higher  levels  of  the  hierarchy.  The  assumption  is  not 
conservative  and  therefore  dangerous.  Further  study  is  needed. 

•  The  methodology  needs  a  red  flag  provision  where  an  independent  analysis  and 
conscious  repair/no  repair  decision  is  needed  whenever  an  inspected  item  receives 
a  Cl  score  less  that  40.  Otherwise,  analysts  who  focus  on  system  level  Cl  data 
will  miss  minor  failures  that  need  to  be  addressed. 

•  The  system  Cl  proposed  here  does  not  follow  the  rules  of  traditional  system 
reliability  and  will  therefore  be  controversial.  The  traditional  system  reliability 
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approach  will  provide  the  probability  that  something  in  the  system  will  fail.  It 
cannot  account  for  component  importance  and  necessitates  an  anal^is  of 
correlation  between  failure  modes.  TTie  system  Cl  proposed  here  purports  to 
provide  the  probability  that  an  entire  structure  will  be  replaced  or  rehabilitated. 
That  has  not  been  proven  and  the  distinction  will  inevitably  cause  confusion. 

•  This  proposed  approach  is  not  a  replacemrait  for  a  traditional  reliability  analysis. 

It  does  not  include  loads,  stresses,  deformation,  size  of  fatigue  cracls,  or  moments 
of  inertia  that  are  r^uired  for  the  commonly  accq»ted  capacity-demand  reliability 
analj^is.  We  have  no  idea  how  a  cost-benefit  analysis  for  a  given  structure  using 
a  traditional  reliability  approach  and  the  approach  described  here  will  vary  in  their 
results, 

7.2  Recommendations 

Bas^  on  the  relative  capabilities  and  limitations  discussed  in  this  report,  the 
following  recommendations  are  made  for  furthCT  study  and  action: 

•  This  rqKjrt  simply  outlines  a  methodology  and  illustrates  it  on  a  sample  structure. 
This  study  should  be  continued  by  applying  it  to  a  single  type  of  shucture  for 
which  Cl  methods  exist  such  as  miter  gates,  spillways,  or  hydropower  structures. 
This  would  determine  what  procedural  modifications  are  needed  between  similar 
stmctures  in  different  locations.  A  comparison  of  inspection  results  from  various 
structures  would  provide  a  common  sense  assessment  of  the  validity  of  the 
methodology.  IiMpections  by  actual  inspectors  will  provide  the  best  suggestions 
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for  improvement  and  will  either  verify  or  refute  the  claim  that  this  methodology 
produces  more  consistency  between  inspectors.  If  previous  Cl  data  exists,  it  could 
be  included  in  a  time-dependent  assessment  of  an  actual  structure.  The  analysis 
of  the  Great  Falls  Spillway  covered  only  a  point  in  time.  Finally,  a  traditional 
reliability  analysis  and  the  approach  proposed  in  this  report  should  be  done  on  the 
same  structure  and  the  results  should  be  compared.  That  might  offer  insight  as  to 
which  approach  is  more  appropriate  for  which  situations. 

•  The  methodology  appears  to  be  applicable  for  any  type  of  structure  and  shovild 
therefore,  be  studied  for  its  applicability  to  highway  bridges,  buildings,  and  other 
common  civil  structures. 

•  The  standardization  of  Cl  methods  for  different  structures  is  aided  tremendously 
by  using  a  consistent  system  where  the  range  of  Cl  values  is  from  0  to  100  and  the 
general  definition  of  ranges  is  consistent.  Similarly,  the  concept  of  a  structured 
hierarchy  should  be  consistent  for  all  structures.  The  Cl  procedure  for  earth  and 
rockfill  embankment  dams  (Andersen  et.al.  1999),  for  example,  uses  a  hierarchy 
to  describe  the  structural  system.  The  procedures  for  miter  gates  (Greimann  et.al. 
1990)  and  sector  gates  (Greimann  et.al.  1993)  should  be  revised  to  incorporate  a 
standardized  method. 

•  Foltz  et.al.  (2001)  indicates  that  Cl  use  throughout  the  Corps  of  Engineer  districts 
has  been  sporadic.  Some  districts  use  Cl  inspections  in  a  half-hearted  maimer  and 
some  do  not  use  them  at  all.  The  only  way  for  an  effective  database  to  ever  be 
established  is  for  every  district  to  conduct  Cl  inspections  on  a  periodic  basis  and 
report  the  results  to  a  hi^er  headquarters  where  they  can  be  consolidated. 
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evaluated  and  used.  The  Federal  Highway  Administration  provides  an  excellent 
model  in  its  requirements  for  inspection  and  reporting  of  condition  on  the  nation’s 
hi^way  bridges.  To  repeat  the  recommendation  made  in  Estes  (2003),  the  Corps 
of  Engineers  should  make  a  commitment  at  the  highest  level  to  require  all  districts 
to  conduct  Cl  inspections  and  then  continually  consolidate  and  the  publish  the 
results.  The  initiative  could  be  phased  in  over  time  starting  with  a  specific  type  of 
structure.  The  inevitable  bugs  could  be  worked  out  at  a  smaller  level  before 
incorporating  more  stractures. 
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